HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedGovernment IDFinancial accountHealth (basic)MediumContained

Wiggin and Dana LLP

bd_bbe77b9f7fa5418e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 20, 2021

Filed

Sep 14, 2021

To disclose

8 weeks

Affected

1state residents only

Linked

6 filings

Confidence

67%

Full breach record for Wiggin and Dana LLP →2 incidents on file

Wiggin and Dana LLP notified individuals of a security incident where files containing SSNs, driver's licenses, financial account info, and medical information may have been accessed. The firm engaged forensic specialists, implemented additional cybersecurity measures, and offered 24 months of credit monitoring. Rhode Island residents were specifically noted as impacted.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 56 days

Jul 20, 2021

Discovered

Sep 14, 2021

Filed

vs. sector median

12 wks faster

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_9867b944dddcf64e2021-09-14Verified
Massachusetts State AGbd_b778b414468609f92021-09-14Verified
Montana State AGbd_c086bb2f3054d4302021-09-14Verified
Maine State AGbd_f4abe692b5a846562021-09-14Candidate

Show 1 more filing ↓up to 6d gap

New Hampshire State AGbd_9cdeaf1132e7516c2021-09-20 · +6dVerified

Name: Wiggin LLP
norm: wiggin
Domain: wiggin.co.uk
Industry: Legal Services

Name: Wiggin and Dana LLP
norm: wiggin and dana
Domain: wiggin.com
Industry: Legal Services
Industry: Professional Servicesllm

Discovered: Jul 20, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Government IDFinancial accountHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reporting to regulatory officials, as required

During the incident: Engaged leading third-party cyber-forensic specialists to assist in our investigation
Conducted a thorough and time-consuming review to identify any information that may have been accessed
Implemented additional cybersecurity measures
Reviewing existing security policies to further protect against similar incidents moving forward
Reporting to regulatory officials, as required
Offering access to credit monitoring and identity theft protection services for 24 months at no cost to you, through Equifax
Changes made: Implemented additional cybersecurity measures
Reviewing existing security policies to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGSep 14 · first

Massachusetts State AGSep 14 · first

Montana State AGSep 14 · first

Maine State AGSep 14 · first

Montana State AGSep 14 · first · this page

New Hampshire State AG+6d

Pattern: first filing Sep 14 (IN), last Sep 20 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-448.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 14, 2021
Raw hash: c8abd632a5060e32188cb77891500403ffa85bbcea02d4a54a9e9fcc63befcdc

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWiggin LLP

Victim entityWiggin and Dana LLP

Incidentdiscovered Jul 20, 2021

Stated responseEngaged leading third-party cyber-forensic specialists to assist in our investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov