MalwareProfessional ServicesProfessional ServicesRansomwareRansom DemandedCustomer Data InvolvedIdentity (basic)Government IDFinancialPHIMediumContained

Schwartz & Greenbaum, LLC

bd_95929210c1f43064 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 29, 2021

Filed

Feb 2, 2022

To disclose

9 weeks

Affected

3state residents only

Linked

4 filings

Confidence

66%

Full breach record for Schwartz & Greenbaum, LLC →

Schwartz & Greenbaum, LLC experienced a ransomware attack on November 29, 2021. An unauthorized third party attempted to infiltrate the network and demanded a ransom. Potentially exposed data for 3 New Hampshire residents includes names, addresses, dates of birth, SSNs, driver's license numbers, financial information, and PHI. The firm engaged forensic investigators, secured its network, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 65 days

Nov 29, 2021

Begins

Nov 29, 2021

Discovered

Feb 2, 2022

Filed

vs. sector median

10 wks faster

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_1b7de305aa57eade2022-02-02Candidate
Montana State AGbd_a3428adbd5bd28232022-02-02Verified
Massachusetts State AGbd_c90be073c3f69d1d2022-02-03 · +1dVerified

Name: Schwartz & Greenbaum, LLC
norm: schwartz greenbaum

Name: Schwartz & Greenbaum, LLC
norm: schwartz greenbaum
Industry: Professional Servicesllm

Discovered: Nov 29, 2021
Breach occurred: Nov 29, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 2, 2022
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancialPHI
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Contacted a reputable third party forensic team to assist with its investigation
Working with law enforcement to help respond to this incident
Working with cybersecurity experts to review all policies and procedures relating to the security of Schwartz & Greenbaum’s systems
Moved quickly to secure our network environment
Launched a thorough investigation
Offered free credit monitoring and identity theft protection through IDX
Changes made: Implementing additional safeguards and enhanced security measures to better protect the privacy and security of information in its systems
Reviewed and taken steps to enhance its policies and procedures relating to the security of its systems and servers
Enhanced information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGFeb 2 · first

Montana State AGFeb 2 · first

New Hampshire State AGFeb 2 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/schwartz-greenbaum-20220202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2022
Raw hash: c1fafde108a1f0188dbfded956702d8e842eb16f268b4b5c8fa94e92b3a5fcf6

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySchwartz & Greenbaum, LLC

Victim entitySchwartz & Greenbaum, LLC

Incidentdiscovered Nov 29, 2021

Stated responseContacted a reputable third party forensic team to assist with its investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov