Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsTargetedData ExfiltratedPIIIdentity (basic)Government IDMediumContained

PILLSBURY WINTHROP SHAW PITTMAN LLP

bd_b215afd6546944fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 1, 2025

Filed

Nov 6, 2025

To disclose

31 weeks

Affected

13state residents only

Linked

10 filings

Confidence

66%

Full breach record for PILLSBURY WINTHROP SHAW PITTMAN LLP →3 incidents on file

Pillsbury Winthrop Shaw Pitman LLP notified individuals of a security incident in late April 2025 where an unauthorized actor downloaded firm documents following a social engineering attack. The firm engaged forensic investigators, notified law enforcement, and is offering 24 months of credit monitoring. The specific data types and total affected count were not explicitly enumerated in this notice.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 31 weeks / 219 days

Apr 1, 2025

Discovered

Nov 6, 2025

Filed

vs. sector median

+13 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

South Carolina State AGbd_0ba5f2f7e42e487f2025-11-06Verified
New Hampshire State AGbd_4d95cd9f800da5f42025-11-06Verified
Washington State AGbd_5cd3ec15e94a68df2025-11-06Verified
Nebraska State AGbd_8e31e65cc116ce642025-11-06Verified

Show 5 more filings ↓up to 1d gap

Iowa State AGbd_b9c1fcb0d2856ca22025-11-06Verified
Delaware State AGbd_c6f6eef2131011f32025-11-06Verified
Indiana State AGbd_dc43924c9e59e1212025-11-06Verified
Massachusetts State AGbd_eaf26ad5c60188452025-11-06Verified
Texas State AGbd_58a008bb40c21d442025-11-07 · +1dVerified

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman
Industry: Professional Servicesllm

Discovered: Apr 1, 2025
Materiality determined: —
Notification sent: Oct 23, 2025
Affected individuals: 13state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Promptly took steps to stop the unauthorized activity
Began an investigation with assistance from a third-party forensic firm
Notified law enforcement
Added further protections to harden systems
Offering complimentary 24-month membership for credit monitoring and identity theft protection services through Equifax
Changes made: Deploying additional safeguards onto systems
Reinforcing security practices
Actively reviewing systems to enhance security monitoring and controls
Fortifying systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(219 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

South Carolina State AGNov 6 · first

New Hampshire State AGNov 6 · first

Washington State AGNov 6 · first

Nebraska State AGNov 6 · first

Iowa State AGNov 6 · first

Delaware State AGNov 6 · first

Indiana State AGNov 6 · first

Massachusetts State AGNov 6 · first

Montana State AGNov 6 · first · this page

Texas State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/11/Consumer-notification-letter-9.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2025
Raw hash: 8b2e4f1cc2425288c6182ecad9bbf967264b608d0de90cb48704360c01ea07ab

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityPILLSBURY WINTHROP SHAW PITTMAN LLP

Victim entityPILLSBURY WINTHROP SHAW PITTMAN LLP

Incidentdiscovered Apr 1, 2025

Stated responsePromptly took steps to stop the unauthorized activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov