Social EngineeringProfessional ServicesProfessional ServicesPhishingTargetedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

PILLSBURY WINTHROP SHAW PITTMAN LLP

bd_b9c1fcb0d2856ca2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 6, 2025

To disclose

—

Affected

Not disclosed

Linked

10 filings

Confidence

67%

Full breach record for PILLSBURY WINTHROP SHAW PITTMAN LLP →3 incidents on file

Pillsbury Winthrop Shaw Pitman LLP notified the Iowa AG of a security event in late April 2025 involving sophisticated social engineering. An unauthorized actor downloaded firm documents after convincing a user to enable access. Notices began rolling out November 6, 2025. Data types include PII and government IDs. No specific count of affected individuals was provided in this courtesy notice.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Nov 6, 2025

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

South Carolina State AGbd_0ba5f2f7e42e487f2025-11-06Verified
New Hampshire State AGbd_4d95cd9f800da5f42025-11-06Verified
Washington State AGbd_5cd3ec15e94a68df2025-11-06Verified
Nebraska State AGbd_8e31e65cc116ce642025-11-06Verified

Show 5 more filings ↓up to 1d gap

Montana State AGbd_b215afd6546944fc2025-11-06Candidate
Delaware State AGbd_c6f6eef2131011f32025-11-06Verified
Indiana State AGbd_dc43924c9e59e1212025-11-06Verified
Massachusetts State AGbd_eaf26ad5c60188452025-11-06Verified
Texas State AGbd_58a008bb40c21d442025-11-07 · +1dVerified

Name: Orrick, Herrington & Sutcliffe LLP
norm: orrick herrington sutcliffe
Domain: orrick.com

Name: PILLSBURY WINTHROP SHAW PITTMAN LLP
norm: pillsbury winthrop shaw pittman
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Nov 6, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementProviding notice to Iowa Attorney General as a courtesy
Initial access: phishing_link

During the incident: Promptly took steps to stop and remediate it
A third-party incident response and forensic firm was engaged to investigate what happened and what data was affected
Notified law enforcement
Blocked the activity
Taken steps to enhance and deploy additional safeguards on to its systems
Reinforcing its security and network processes and procedures
Reviewing its systems to enhance security monitoring and access controls
Reviewed its training processes related to phishing and social engineering
Offering a complimentary 24-month membership for credit monitoring and identity theft protection services through Equifax
Changes made: Reinforcing its security and network processes and procedures
Reviewing its systems to enhance security monitoring and access controls
Reviewed its training processes related to phishing and social engineering
Source: Quoted from the filing itself, not independently verified.

Compliance flags: IA AG ≤5 bday
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

South Carolina State AGNov 6 · first

New Hampshire State AGNov 6 · first

Washington State AGNov 6 · first

Nebraska State AGNov 6 · first

Montana State AGNov 6 · first

Delaware State AGNov 6 · first

Indiana State AGNov 6 · first

Massachusetts State AGNov 6 · first

Iowa State AGNov 6 · first · this page

Texas State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/1162025_Pillsbury_Winthrop_Shaw_Pit_DD9C1A6490A9B.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2025
Raw hash: 15f6bdc47a6e6f9b8a9d1374588fb64a39b0f22b03b2f073358f745d04a27251

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityOrrick, Herrington & Sutcliffe LLP

Victim entityPILLSBURY WINTHROP SHAW PITTMAN LLP

IncidentPhishing

Stated responsePromptly took steps to stop and remediate it

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov