UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedGovernment IDMediumContained

Goulston & Storrs

bd_c02fed6cad29c66b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 15, 2026

To disclose

—

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Goulston & Storrs →

Goulston & Storrs, a law firm, notified individuals that an incident may have affected the privacy of certain information, including an expired Driver's License. The firm notified law enforcement, conducted internal and third-party forensic investigations, and offered credit monitoring services. No specific dates of discovery or occurrence were provided in the notice.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Apr 15, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_7fe99a95b8bac1e92026-04-10 · +5dCandidate

Name: Goulston & Storrs
norm: goulston storrs
Domain: goulstonstorrs.com

Name: Goulston & Storrs
norm: goulston storrs
Domain: goulstonstorrs.com
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Apr 15, 2026
Affected individuals: 3state-resident count only
Data types: Government ID
Attack vector: Unknown
Regulator citations: Notified law enforcement

During the incident: Notified law enforcement
Conducted a thorough internal investigation
Retained the services of a third-party forensic to conduct an independent investigation
Reviewed our policies and procedures related to data protection
Arranged for you to enroll, at no cost to you, in credit monitoring and identity protection services
Changes made: Reviewed our policies and procedures related to data protection
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-575-goulston-storrs/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2026
Raw hash: 950b1064dd0c3133e7c1c071c4c57e4deb5de96a7721dad391a7a1d9f9843e05

Linked disclosures

Ransomware claims (1)

Reporting entityGoulston & Storrs

Victim entityGoulston & Storrs

IncidentUnknown

Stated responseNotified law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov