PhysicalProfessional ServicesProfessional ServicesLossCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Jarrett & Luitjens, PLC

bd_b61aeac905386194 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 19, 2018

Filed

May 24, 2018

To disclose

5 weeks

Affected

19state residents only

Confidence

66%

Jarrett & Luitjens, PLC, a law firm specializing in estate and elder law, reported the loss of a duplicate backup drive containing firm files. The drive was dropped in the office parking lot on April 19, 2018, and presumed stolen. The incident potentially affected 19 New Hampshire residents, as well as residents of Vermont and Rhode Island. The data potentially exposed includes names, addresses, dates of birth, and Social Security numbers. The firm filed a police report and is offering one year of complimentary identity theft protection services through Experian to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Apr 19, 2018

Begins

Apr 19, 2018

Discovered

May 24, 2018

Filed

vs. sector median

14 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed19 affectedView incident

Name: Jarrett & Luitjens, PLC
norm: jarrett luitjens
Domain: jarrettcompaniesinc.com

Name: Jarrett & Luitjens, PLC
norm: jarrett luitjens
Domain: jarrettcompaniesinc.com
Industry: Professional Servicesllm

Discovered: Apr 19, 2018
Breach occurred: Apr 19, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 24, 2018
Affected individuals: 19state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified the Attorney General of the State of New Hampshire

During the incident: Took efforts to retrieve the drive, including speaking with occupants of nearby office buildings
Filed a report with local law enforcement
Providing free identity theft protection services to the potentially impacted individuals through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jarrett-20180524.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 24, 2018
Raw hash: 48645a51fafdba2c75147c99797ea45732021ad6bc36eb5daa46eb920b0422a0

Reporting entityJarrett & Luitjens, PLC

Victim entityJarrett & Luitjens, PLC

Incidentdiscovered Apr 19, 2018

Stated responseTook efforts to retrieve the drive, including speaking with occupants of nearby office buildings

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov