MalwareIdentity (basic)LowContained

Rubin Lublin, LLC

bd_a2db13b92c6ff0a3 · schema v1 · pii pii-v2

Severity

Low

Discovered

Sep 29, 2024

Filed

Oct 7, 2025

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Rubin Lublin, LLC →

Rubin Lublin, LLC, a law firm, experienced a ransomware attack discovered on September 29, 2024. The incident potentially exposed clients' names. The firm engaged forensic specialists, notified federal law enforcement, and offered 12 months of complimentary credit monitoring via Cyberscout/TransUnion. Notices were sent on October 7, 2025, to residents in multiple states including Nebraska, New York, and Maryland.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 29, 2024

Discovered

Oct 7, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_d13e90d9560584d42025-10-07Candidate
Massachusetts State AGbd_a1f0c7c3c258e9912025-10-20 · +13dVerified
New Hampshire State AGbd_f2cf47b8e9113e712025-10-20 · +13dVerified

Name: Rubin Lublin, LLC
norm: rubin lublin

Name: Rubin Lublin, LLC
norm: rubin lublin

Discovered: Sep 29, 2024
Materiality determined: —
Notification sent: Oct 7, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: reported this incident to federal law enforcement

During the incident: Engaged third-party forensic specialists to investigate this matter
Reported this incident to federal law enforcement
Arranged for you to activate, at no cost to you, Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services for twelve (12) months provided by Cyberscout, a TransUnion company
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 7 · first

Nebraska State AGOct 7 · first · this page

Massachusetts State AG+13d

New Hampshire State AG+13d

Pattern: first filing Oct 7 (IN), last Oct 20 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/27e34725-a7c1-43c4-9925-9ba933370e0d.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 7, 2025
Raw hash: 5b4085ea5ce94eafb50d240ac49b0177af0adc9889001ee0620e8e76095aaf88

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRubin Lublin, LLC

Victim entityRubin Lublin, LLC

Incidentdiscovered Sep 29, 2024

Stated responseEngaged third-party forensic specialists to investigate this matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov