HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Kaufman Borgeest & Ryan LLP

bd_a0f1c51b82b8ed68 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 21, 2023

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Kaufman Borgeest & Ryan LLP →

Kaufman Borgeest & Ryan LLP notified consumers that unauthorized actors accessed internal accounting files on November 4, 2023, obtaining names and Social Security numbers. The firm engaged a cybersecurity firm, contained the activity, and enhanced security measures. Complimentary credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Nov 4, 2023

Begins

Dec 21, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_ff006ed8c2ca80482023-11-06 · +45dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_20b1efa2312e70552023-12-21Verified
New Hampshire State AGbd_2b67083dcee2e04c2023-12-21Verified
Maine State AGbd_ec57989a365085262023-12-21Candidate

Name: Kaufman Borgeest & Ryan LLP
norm: kaufman borgeest ryan
Domain: kbrlaw.com

Name: Kaufman Borgeest & Ryan LLP
norm: kaufman borgeest ryan
Domain: kbrlaw.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Nov 4, 2023 – Nov 4, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Implemented our incident response plan
Took measures to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Changes made: Taken steps to further enhance our security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGDec 21 · first

New Hampshire State AGDec 21 · first

Maine State AGDec 21 · first

Vermont State AGDec 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-12-21-kaufman-borgeest-ryan-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2023
Raw hash: 3269d43b0dcea03c8b73c9ffb7e56ec28f1f00d00f1cce47b39e8f93db13091c

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityKaufman Borgeest & Ryan LLP

Victim entityKaufman Borgeest & Ryan LLP

IncidentUnauthorized Access

Stated responseImplemented our incident response plan

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov