HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataTargetedCustomer Data InvolvedAuthenticationBiometricEducationFinancial accountFinancial credentialsHealth (basic)Identity (basic)Government IDPHIHighContained

Barran Liebman LLP

bd_9d320e2b5409e913 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 19, 2021

Filed

Oct 17, 2022

To disclose

14 months

Affected

2,707state residents only

Linked

5 filings

Confidence

69%

Full breach record for Barran Liebman LLP →

Barran Liebman LLP reported unauthorized access to its systems on August 19, 2021, affecting 2,707 Washington residents. The incident exposed personal information including names, SSNs, financial account numbers, health insurance info, biometric data, and credentials. Barran Liebman engaged forensic experts, notified law enforcement, and sent notification letters on October 7, 2022, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d14 months discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 months / 424 days

Aug 19, 2021

Begins

Aug 19, 2021

Discovered

Oct 17, 2022

Filed

vs. sector median

+43 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Oregon State AGbd_984a53ff6ad8f9bf2022-10-17Verified
Maine State AGbd_5553204a3505e9a42022-10-10 · +7dVerified
Montana State AGbd_1c34b4326fd117a82022-10-07 · +10dCandidate
Indiana State AGbd_f54c78eb36b3ce652022-10-07 · +10dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Barran Liebman LLP
norm: barran liebman
Industry: Professional Servicesllm

Discovered: Aug 19, 2021
Breach occurred: Aug 19, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 7, 2022
Affected individuals: 2,707state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)PHIAuthenticationBiometric
Data elements: NameFinancial account numberStudent ID numberHealth insurance IDMedical informationBiometric dataSocial Security number
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Office of Washington Attorney General Consumer Protection Division
Initial access: valid_credentials

During the incident: Commenced an immediate and thorough investigation
Alerted law enforcement
Engaged leading cybersecurity experts to identify what personal information, if any, might have been present in the accessed files
Conducted an extensive forensic investigation and manual document review
Provided the affected Washington residents with written notification
Offered complimentary credit monitoring services
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(424 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGOct 7 · first

Indiana State AGOct 7 · first

Maine State AG+3d

Oregon State AG+10d

Washington State AG+10d · this page

Pattern: first filing Oct 7 (MT), last Oct 17 (WA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM13997.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2022
Raw hash: 08d98b8857118520b9c049e2fd2198d6bb55f048167c26286cec93f3ecbc6d41

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityBarran Liebman LLP

Incidentdiscovered Aug 19, 2021

Stated responseCommenced an immediate and thorough investigation

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com