MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PHIHighContained

The Lanier Law Firm

bd_af1fc3359cad3ed3 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 21, 2021

Filed

Jun 2, 2022

To disclose

16 months

Affected

1,479state residents only

Linked

8 filings

Confidence

69%

Full breach record for The Lanier Law Firm →3 incidents on file

The Lanier Law Firm reported a ransomware attack impacting systems between Feb 2-19, 2021, discovered Feb 21, 2021. 1,479 Washington residents affected. Data included names, SSNs, DOBs, driver's licenses, financial accounts, and medical/health insurance info. Notices sent June 2, 2022. Response included forensic investigation, law enforcement notification, credit monitoring, and security enhancements.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d16 months discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 19 days

discovery → filing · 16 months / 466 days

Feb 2, 2021

Begins

Feb 21, 2021

Discovered

Jun 2, 2022

Filed

vs. sector median

+47 wks slower

This filing is one of 8 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

California State AGbd_25a5a861176027742022-06-02Candidate
Maine State AGbd_5c19cddb138b06352022-06-02Verified
Indiana State AGbd_5ea561e15bd426c12022-06-02Verified
Montana State AGbd_992c0aed83ac4b5d2022-06-02Verified

Show 3 more filings ↓up to 5d gap

Massachusetts State AGbd_a59d98b8792460902022-06-02Verified
Oregon State AGbd_d6822c3e2f0893962022-06-02Verified
New Hampshire State AGbd_e5a16ed8395e28f62022-06-07 · +5dVerified

Name: The Lanier Law Firm
norm: the lanier law firm

Name: The Lanier Law Firm
norm: the lanier law firm
Industry: Professional Servicesllm

Discovered: Feb 21, 2021
Breach occurred: Feb 2, 2021 – Feb 19, 2021
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 2, 2022
Affected individuals: 1,479state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported this event to federal law enforcementNotified other appropriate state regulators

During the incident: Launched an investigation with the assistance of third-party computer forensic specialists
Secured their systems
Restored access to the information
Reported this event to federal law enforcement
Implemented additional technical and administrative safeguards and training to its employees
Provided access to credit monitoring and identity restoration services for 12 months through Equifax
Established a designated assistance line
Changes made: Implemented additional technical and administrative safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 months(466 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

California State AGJun 2 · first

Maine State AGJun 2 · first

Indiana State AGJun 2 · first

Montana State AGJun 2 · first

Massachusetts State AGJun 2 · first

Oregon State AGJun 2 · first

Washington State AGJun 2 · first · this page

New Hampshire State AG+5d

Pattern: first filing Jun 2 (CA), last Jun 7 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA11586.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2022
Raw hash: af94f0c3ac7bae2348844715bf03ce2edc9e78547f26054c3bfeb8068b510f60

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityThe Lanier Law Firm

Victim entityThe Lanier Law Firm

Incidentdiscovered Feb 21, 2021

Stated responseLaunched an investigation with the assistance of third-party computer forensic specialists

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com