HackingProfessional ServicesFinancial accountFinancial credentialsHealth (basic)Identity (basic)Government IDPCIPIIMediumContained

BLANK ROME LLP

bd_aedffcbae2d815dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 26, 2026

To disclose

—

Affected

35state residents only

Linked

5 filings

Confidence

69%

Full breach record for BLANK ROME LLP →

Blank Rome LLP notified Massachusetts residents of an incident involving unauthorized access to client information, including names, Social Security numbers, addresses, financial account numbers, and payment card data. The firm engaged Epiq to provide two years of credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jun 26, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_256fe2cc178645f12026-06-26Verified
California State AGbd_86e41f5aa912f8e72026-06-26Candidate
New Hampshire State AGbd_d1f001e9d218875e2026-06-26Verified
Texas State AGbd_edaf1663a9007e032026-06-26Verified

Name: BLANK ROME LLP
norm: blank rome

Name: BLANK ROME LLP
norm: blank rome

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 35state-resident count only
Data types: Financial accountFinancial credentialsHealth (basic)Identity (basic)Government IDPCIPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Massachusetts Attorney General
Initial access: valid_credentials

During the incident: Arranged for two years of complimentary access to Epiq’s Privacy Solutions ID credit monitoring
Changes made: Identified and addressed the incident
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJun 26 · first

California State AGJun 26 · first

New Hampshire State AGJun 26 · first

Texas State AGJun 26 · first

Massachusetts State AGJun 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1043-blank-rome-llp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2026
Raw hash: efc22ba8e606d4184aafa371ef90cd01b72c7e6820649137cc74f779477ab97e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBLANK ROME LLP

Victim entityBLANK ROME LLP

IncidentUnauthorized Access

Stated responseArranged for two years of complimentary access to Epiq’s Privacy Solutions ID credit monitoring

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov