UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedPIIIdentity (basic)Government IDFinancialMediumContained

Riddle & Butts, LLP

bd_8dac90d1f4d86828 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 10, 2026

To disclose

—

Affected

Not disclosed

Linked

8 filings

Confidence

66%

Full breach record for Riddle & Butts, LLP →

Riddle & Butts, LLP notified Massachusetts residents of a data security incident affecting personal information. The firm conducted an investigation, secured its network, and enhanced security protocols, including moving inactive client data to isolated storage. No specific attack vector, dates of occurrence, or number of affected individuals were disclosed. The firm is offering 24 months of complimentary credit monitoring via Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 10, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_e051698dcb32ee0f2026-03-10Verified
Indiana State AGbd_f24cf2933591a89f2026-03-10Verified
Indiana State AGbd_fe4d83dfbff627bf2026-03-10Verified
Texas State AGbd_674f2dd5cb9770ba2026-03-12 · +2dVerified

Show 3 more filings ↓up to 84d gap

New Hampshire State AGbd_75b9543e653360b62026-06-02 · +84dVerified
Nebraska State AGbd_c57042afd58274712026-06-02 · +84dVerified
Texas State AGbd_fd12b99434464c732026-06-02 · +84dVerified

Name: Riddle & Butts, LLP
norm: riddle butts
Domain: riddlebutts.com

Name: Riddle & Butts, LLP
norm: riddle butts
Domain: riddlebutts.com
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Mar 10, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial
Attack vector: Unknown

During the incident: Conducted a diligent investigation to confirm the full nature and scope
Took prompt steps to ensure security of its network environment
Conducted a comprehensive review of the information potentially affected
Enhanced its existing security protocols
Continues to evaluate its policies and procedures related to data privacy and security
Inactive client data will be moved to an isolated, highly protected storage system
Providing you with access to credit monitoring services for 24 months at no cost to you
Changes made: Enhanced its existing security protocols
Continues to evaluate its policies and procedures related to data privacy and security
Inactive client data will be moved to an isolated, highly protected storage system consistent with current guidance published by the National Institute of Standards and Technology (NIST)
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Maine State AGMar 10 · first

Indiana State AGMar 10 · first

Massachusetts State AGMar 10 · first · this page

Texas State AG+2d

New Hampshire State AG+84d

Nebraska State AG+84d

Texas State AG+84d

Pattern: first filing Mar 10 (ME), last Jun 2 (TX) — a 84-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-358-riddle-butts-llp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2026
Raw hash: 78ad1b6a32735a23822e99b25753331eaa6b98ef6904f5be6be5201f7665d429

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityRiddle & Butts, LLP

Victim entityRiddle & Butts, LLP

IncidentUnknown

Stated responseConducted a diligent investigation to confirm the full nature and scope

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov