MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedIdentity (basic)LowContained

Bricker & Eckler LLP

bd_83445976027bfd5e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 31, 2021

Filed

Apr 2, 2021

To disclose

9 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

64%

Full breach record for Bricker & Eckler LLP →

Bricker & Eckler LLP, a law firm, was the target of a ransomware attack. An unauthorized party accessed internal systems between January 14 and January 31, 2021, and obtained some data. The firm contained the incident, engaged forensic experts, and notified law enforcement. Affected data may include names, addresses, and other personal information. The firm is offering one year of identity monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 31, 2021 → Notified Apr 6, 202165d ✗ CA 60-day late9 weeks discovery → filing

Incident timeline

undetected · 17 days

discovery → filing · 9 weeks / 61 days

Jan 14, 2021

Begins

Jan 31, 2021

Discovered

Apr 2, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_0a51a13ab48a05232021-04-02Verified
Maine State AGbd_795e89cdbfda35b42021-04-02Candidate
HHS OCRbd_fc0ed20e70edc30d2021-04-02Verified
New Hampshire State AGbd_819ff00206636e792021-04-05 · +3dVerified

Show 2 more filings ↓up to 4d gap

Montana State AGbd_050810a4d81cb5192021-04-06 · +4dVerified
Indiana State AGbd_213787199d8bafc32021-04-06 · +4dVerified

Name: Bricker & Eckler LLP
norm: bricker eckler

Name: Bricker & Eckler LLP
norm: bricker eckler
Industry: Professional Servicesllm

Discovered: Jan 31, 2021
Breach occurred: Jan 14, 2021 – Jan 31, 2021
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 6, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Took measures to contain the incident
Launched an investigation
Engaged third-party cybersecurity forensic experts to assist
Notified federal law enforcement
Retrieved the data involved from the unauthorized party
Taken steps to delete the data
Conducted a thorough review of the data to identify individuals whose personal information may have been involved
Changes made: Implemented additional security protocols designed to enhance the security of Bricker’s network, internal systems and applications
Continuing to evaluate additional steps that may be taken to further increase Bricker’s defenses going forward
Offering a complimentary one-year membership of Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(61 days from discovery to filing)
Compliance flags: CA 60-day late · 65d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 31, 2021
→ Notified: Apr 6, 2021
65d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 31, 2021 → Notified: Apr 6, 2021	65d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Massachusetts State AGApr 2 · first

Maine State AGApr 2 · first

HHS OCRApr 2 · first

California State AGApr 2 · first · this page

New Hampshire State AG+3d

Montana State AG+4d

Indiana State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-539675
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2021
Raw hash: 9ad0d194326854853e3ebdc0434c7fe042fd5ee3d47934a405c3fde5c148ca61

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityBricker & Eckler LLP

Victim entityBricker & Eckler LLP

Incidentdiscovered Jan 31, 2021

Stated responseTook measures to contain the incident

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov