HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Day Rettig Martin, PC

bd_921afba5203848f2 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 17, 2024

Filed

Feb 13, 2025

To disclose

43 weeks

Affected

2,252state residents only

Linked

3 filings

Confidence

66%

Full breach record for Day Rettig Martin, PC →

Day Rettig Martin, P.C. notified Iowa AG of unauthorized access to its systems discovered on April 17, 2024. The incident potentially affected 2,252 Iowa residents, exposing names, SSNs, driver's licenses, and financial account data. Notifications were sent on February 13, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday43 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 43 weeks / 302 days

Apr 17, 2024

Begins

Apr 17, 2024

Discovered

Feb 13, 2025

Filed

vs. sector median

+24 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_2e1d22723baafc062025-02-13Verified
Nebraska State AGbd_8a5a3d4a44ea5f232025-02-13Verified

Name: Day Rettig Martin, PC
norm: day rettig martin

Name: Day Rettig Martin, PC
norm: day rettig martin
Industry: Professional Servicesllm

Discovered: Apr 17, 2024
Breach occurred: Apr 17, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 13, 2025
Affected individuals: 2,252state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Consumer Protection Division Security Breach Notifications Office of the Attorney General of Iowa
Initial access: valid_credentials

During the incident: Secured its systems
Engaged a third-party forensic firm to investigate the incident
Secured our network
Swiftly engaged a third-party team of forensic investigators
Enhance the security of our network
Arranged for you to enroll, at no cost to you, in an online credit monitoring service for 12 months provided by Cyberscout
Changes made: Enhance the security of our network to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 43 weeks(302 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 13 · first

Nebraska State AGFeb 13 · first

Iowa State AGFeb 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/2132025_Day_Rettig_Martin_P_967AA2109D26C.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 13, 2025
Raw hash: 1a9e1ac0fca1acac22a69c4d5581b8e50fa8638de5463c2f7636fd39ec3ce9d2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDay Rettig Martin, PC

Victim entityDay Rettig Martin, PC

Incidentdiscovered Apr 17, 2024

Stated responseSecured its systems

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov