Social EngineeringPretextingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained

BLANK ROME LLP

bd_86e41f5aa912f8e7 · schema v1 · pii pii-v1

On May 21, 2026, Blank Rome LLP experienced a social engineering incident where an unauthorized third party posed as IT support and tricked an attorney into uploading files to an external Google Drive account. The firm identified the incident within two hours, took the device offline, and deleted the files. The compromised data included names and Social Security numbers, and potentially other PII, financial, and health information. The firm engaged external cybersecurity professionals, notified law enforcement, and is offering credit monitoring to affected individuals.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

bd_256fe2cc178645f1Indiana State AGfiled 2026-06-26Verified
bd_d1f001e9d218875eNew Hampshire State AGfiled 2026-06-26Verified
bd_edaf1663a9007e03Texas State AGfiled 2026-06-26Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-625527
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2026
Raw hash: 772036a133262782eb232aae8c2b53e1f5d7865d1b248c331283156d1d99633f

Reporting entity

Name: BLANK ROME LLP
norm: blank rome

Victim entity

Name: BLANK ROME LLP
norm: blank rome

Incident

Discovered: May 21, 2026
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_GOVERNMENTIDENTITY_BASIC
Attack vector: Unknown
MITRE ATT&CK: T1566 Phishing
Threat actor: External
Initial access: phishing_link

Compliance

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.