MalwareRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Schwartz & Greenbaum, LLC
bd_95929210c1f43064 · schema v1 · pii pii-v1
Full breach record for Schwartz & Greenbaum, LLC →Schwartz & Greenbaum, LLC, a Maryland-based law firm, notified the New Hampshire Attorney General of a ransomware attack on November 29, 2021. The incident potentially exposed the personal information of 3 New Hampshire residents, including names, SSNs, driver's license numbers, financial data, and health information. No evidence of misuse was found. The firm engaged forensic investigators, worked with law enforcement, and offered 12 months of credit monitoring to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1b7de305aa57eadeMaine State AGfiled 2022-02-02Candidate
- bd_a3428adbd5bd2823Montana State AGfiled 2022-02-02Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/schwartz-greenbaum-20220202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 2, 2022
- Raw hash
- c1fafde108a1f0188dbfded956702d8e842eb16f268b4b5c8fa94e92b3a5fcf6
Reporting entity
- Name
- Schwartz & Greenbaum, LLCnorm: schwartz greenbaum
Victim entity
- Name
- Schwartz & Greenbaum, LLCnorm: schwartz greenbaum
Incident
- Discovered
- Nov 29, 2021
- Materiality determined
- —
- Notification sent
- Feb 2, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.