DisclosureLens
AccidentalProfessional ServicesProfessional ServicesData MishandlingCustomer Data InvolvedGovernment IDIdentity (basic)HighResolved

WILMER CUTLER PICKERING HALE AND DORR LLP

bd_a050efd5df9ab64b · schema v1 · pii pii-v2

Severity

High

Discovered

May 8, 2026

Filed

Aug 12, 2026

To disclose

14 weeks

Affected

14,496state residents only

Linked

15 filings

Confidence

64%
Full breach record for WILMER CUTLER PICKERING HALE AND DORR LLP →

Wilmer Cutler Pickering Hale and Dorr LLP notified clients of a data security incident on May 8, 2026, where personnel mistakenly provided personal information, including Social Security Numbers and dates of birth, to an unauthorized third party who misrepresented their identity. The firm retained forensic experts, notified law enforcement, and is offering 24 months of credit monitoring via Experian. The incident is resolved, and the firm is retraining personnel on data handling procedures.

South Carolina clock✓ SC CRA notice due14 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 96 days

May 8, 2026

Begins

May 8, 2026

Discovered

Aug 12, 2026

Filed

vs. sector median

6 wks faster

This filing is one of 15 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 33d gap

Showing first 10 of 14 linked disclosures.

Filing propagation · 11 filings · 9 states

View merged incident ↗
California State AGJul 10 · first
Nebraska State AGJul 10 · first
Massachusetts State AGJul 10 · first
Massachusetts State AGJul 10 · first
Texas State AG+4d
Washington State AG+5d
Oregon State AG+26d
Delaware State AG+33d
South Carolina State AG+33d · this page
New Hampshire State AG+40d
Texas State AG+42d

Pattern: first filing Jul 10 (CA), last Aug 21 (TX) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 14 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.