HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Pelli Clarke & Partners

bd_837699d1374ff9cd · schema v1 · pii pii-v2

Severity

Low

Discovered

Jul 3, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

2state residents only

Linked

2 records

Confidence

66%

Pelli Clarke & Partners notified individuals of a data privacy event after detecting suspicious network activity on July 3, 2026. The firm secured its network and engaged specialists. On July 30, 2026, it confirmed that certain files containing personal information were taken from its network. The firm is offering identity protection services through Kroll. One Rhode Island resident was explicitly noted as notified.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 3, 2026

Discovered

Sep 1, 2026

Filed

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebooba_projectbd_771b7d0074419b392026-07-22 · +41dCandidate

Name: Pelli Clarke & Partners
norm: pelli clarke partners

Name: Pelli Clarke & Partners
norm: pelli clarke partners
Industry: Professional Servicesllm

Discovered: Jul 3, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Took immediate action to secure our network
Commenced an investigation, working under the guidance of specialists
Took our systems offline
Resetting account passwords
Implementing additional measures to bolster our security posture
Providing access to identity protections services through Kroll
Changes made: Reviewing our security controls, policies, and training programs
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1616-pelli-clarke-partners/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: 6e9e80c608190b88f5a41b2fe4ed67f75cfae820e746fd01a3cdbfd9afbd2c78

Linked disclosures

Ransomware claims (1)

Reporting entityPelli Clarke & Partners

Victim entityPelli Clarke & Partners

Incidentdiscovered Jul 3, 2026

Stated responseTook immediate action to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov