MalwareProfessional ServicesProfessional ServicesRansomwareRansom DemandedData ExfiltratedDelayed DiscoveryHealth (basic)Identity (basic)Government IDPHIPIIHighContained

Wolf Haldenstein Adler Freeman & Herz LLP

bd_8fc1c900a335fed5 · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 13, 2023

Filed

Jan 16, 2025

To disclose

13 months

Affected

67,820state residents only

Linked

16 records

Confidence

69%

Full breach record for Wolf Haldenstein Adler Freeman & Herz LLP →2 incidents on file

Wolf Haldenstein Adler Freeman & Herz LLP disclosed a ransomware incident detected on Dec 13, 2023, affecting 67,820 Washington residents. Data exposed included names, SSNs, and medical info. Notices sent Jan 10, 2025. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d13 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 13 months / 400 days

Dec 13, 2023

Begins

Dec 13, 2023

Discovered

Jan 16, 2025

Filed

vs. sector median

+38 wks slower

This filing is one of 16 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 391 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_8552ef9d273399f82025-01-17 · +1dVerified by operator
South Carolina State AGbd_9b1cd8fcc3d360312025-01-17 · +1dVerified by operator
Iowa State AGbd_f6dabcb4a2c109fc2025-01-17 · +1dVerified by operator
Maine State AGbd_59773b3aabb12e552025-01-15 · +1dVerified

Show 6 more filings ↓up to 301d gap

California State AGbd_d2bd2e440c25b7392025-01-15 · +1dVerified by operator
New Hampshire State AGbd_01c8c467936f5ef02025-01-14 · +2dVerified by operator
Indiana State AGbd_3f19b595050c24cc2025-01-13 · +3dVerified
Rhode Island State AGbd_3e9cc9ff1838a31e2025-01-28 · +12dVerified
Maryland State AGbd_747af5a683f6a74f2025-11-13 · +301dVerified by operator
Maryland State AGbd_96d242fcec7fed342025-11-13 · +301dVerified by operator

Showing first 10 of 15 linked disclosures.

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com
Industry: Professional Servicesllm

Discovered: Dec 13, 2023
Breach occurred: Dec 13, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 10, 2025
Affected individuals: 67,820state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PII
Data elements: NameSocial Security numberMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 0dexposure 0d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Promptly took steps to secure its network
Offering complimentary credit monitoring to individuals who believe they may have been affected by this incident
Changes made: Reviewed and enhanced its existing policies and procedures related to data privacy to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(400 days from discovery to filing)
Compliance flags: WA AG >90dLeak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Indiana State AGJan 13 · first

New Hampshire State AG+1d

Maine State AG+2d

California State AG+2d

Washington State AG+3d · this page

Massachusetts State AG+4d

South Carolina State AG+4d

Iowa State AG+4d

Rhode Island State AG+15d

Maryland State AG+304d

Pattern: first filing Jan 13 (IN), last Nov 13 (MD) — a 304-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA31952.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2025
Raw hash: 15c30124fa4c5e55dca0e29ac992538ca0deec6d3b184fd6615a66e37297b1d7

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWolf Haldenstein Adler Freeman & Herz LLP

Victim entityWolf Haldenstein Adler Freeman & Herz LLP

Incidentdiscovered Dec 13, 2023

Stated responseEngaged a specialized cybersecurity firm to investigate the nature and scope of the incident

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com