MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedTargetedPIIIdentity (basic)Government IDMediumContained

Hughes Socol Piers Resnick & Dym, Ltd

bd_8744a80acb56d550 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 13, 2020

Filed

Jul 9, 2021

To disclose

43 weeks

Affected

587state residents only

Linked

8 filings

Confidence

65%

Full breach record for Hughes Socol Piers Resnick & Dym, Ltd →

Hughes Socol Piers Resnick & Dym, Ltd. issued a supplemental notice regarding a September 2020 malware incident. Unauthorized actors gained access between Aug 28 and Sep 14, 2020, encrypting systems and potentially accessing client PII. The firm engaged forensic investigators and offered one year of credit monitoring. No specific count of affected individuals was provided in this notice.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 16 days

discovery → filing · 43 weeks / 299 days

Aug 28, 2020

Begins

Sep 13, 2020

Discovered

Jul 9, 2021

Filed

vs. sector median

+24 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

New Hampshire State AGbd_d831b290507ba7962021-07-12 · +3dVerified
Illinois State AGbd_4eb5bbb15feaf7572021-01-01 · +189dVerified
Montana State AGbd_5350719f20af520c2020-12-11 · +210dVerified
Massachusetts State AGbd_5e424036e455da812020-12-11 · +210dVerified

Show 3 more filings ↓up to 555d gap

Maine State AGbd_7296643c49813ca92020-12-11 · +210dVerified
Indiana State AGbd_0217a6cd2bf6887e2020-11-10 · +241dVerified
Illinois State AGbd_9cfaaa0a22f363e82020-01-01 · +555dCandidate

Name: Hughes Socol Piers Resnick & Dym, Ltd
norm: hughes socol piers resnick dym
Domain: hsplegal.com

Name: Hughes Socol Piers Resnick & Dym, Ltd
norm: hughes socol piers resnick dym
Domain: hsplegal.com
Industry: Professional Servicesllm

Discovered: Sep 13, 2020
Breach occurred: Aug 28, 2020 – Sep 14, 2020
Undetected for: 16 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 18, 2021
Affected individuals: 587state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notifying state and federal regulators, as required
Initial access: valid_credentials

During the incident: Commenced an investigation
Working with third-party IT and forensic investigators
Secure our network
Offering you complimentary access to one year of credit monitoring and identity theft restoration services through TransUnion
Changes made: Review our existing policies and procedures
Implement additional safeguards
Provide additional training to our employees on data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 43 weeks(299 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+314d

Montana State AG+345d

Massachusetts State AG+345d

Maine State AG+345d

Illinois State AG+366d

Montana State AG+555d · this page

New Hampshire State AG+558d

Pattern: first filing Jan 1 (IL), last Jul 12 (NH) — a 558-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-72.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 9, 2021
Raw hash: 35fd96815b1006bc73432c9b3b40872fd2a7d38331a2f62d90c68d45b63c5884

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityHughes Socol Piers Resnick & Dym, Ltd

Victim entityHughes Socol Piers Resnick & Dym, Ltd

Incidentdiscovered Sep 13, 2020

Stated responseCommenced an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov