MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedRansom DemandedPIIIdentity (basic)OtherLowContained

Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

bd_8f628ea1b589d219 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 27, 2024

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C →3 incidents on file

Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C. experienced a ransomware incident between Nov 21 and Dec 12, 2023. Two New Hampshire residents were affected. Notification sent Aug 19, 2024. Response included law enforcement notification, forensic investigation, network hardening, and credit monitoring offers.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Nov 21, 2023

Begins

Aug 27, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by alphv about this victim predates this filing by 362 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_046cecae47c54f202024-08-22 · +5dVerified
Montana State AGbd_ea25c96fcbea9d6f2024-08-21 · +6dCandidate
Indiana State AGbd_e2db7d46c30da3f32024-08-19 · +8dVerified

Name: Pierson Ferdinand LLP
norm: pierson ferdinand
Domain: pierferd.com

Name: Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C
norm: eckell sparks levy auerbach monte sloane matthews auslander
Domain: eckellsparks.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Nov 21, 2023 – Dec 12, 2023
Materiality determined: —
Notification sent: Aug 19, 2024
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Other
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: reported the Incident to law enforcement

During the incident: Reported the Incident to law enforcement
Worked with cybersecurity counsel and forensic experts to investigate
Hardening of their network and environment
Firmwide employee training
Offered complimentary identity theft and credit monitoring services
Changes made: Hardening of their network and environment
Firmwide employee training
Continued evaluation of opportunities to strengthen their security posture
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 19 · first

Montana State AG+2d

Vermont State AG+3d

New Hampshire State AG+8d · this page

Pattern: first filing Aug 19 (IN), last Aug 27 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/eckell-sparks-levy-auerbach-monte-sloane-matthews-auslander-20240827.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 27, 2024
Raw hash: c1061613589c37c18e35a9ede3168894243c6d9f26a041e3b31c8bcb33b98e7c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityPierson Ferdinand LLP

Victim entityEckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

IncidentRansomware

Stated responseReported the Incident to law enforcement

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov