MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowContained

Lepant Law Office

bd_c16e1f5984e1a570 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 5, 2025

Filed

May 9, 2025

To disclose

9 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Lepant Law Office →

Lepant Law Office PC LLO experienced a ransomware attack on March 5, 2025, where an unauthorized actor gained access via remote desktop, encrypting firm servers. The incident affected two New Hampshire residents. The firm contained the breach by disconnecting the server and restoring data from backups. Notifications were sent to affected individuals on May 7, 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d9 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 9 weeks / 65 days

Mar 5, 2025

Begins

Mar 5, 2025

Discovered

May 9, 2025

Filed

vs. sector median

9 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteqilinbd_5d47cf9003ad82422025-03-17 · +53dVerified

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_cc833c838815873b2025-05-08 · +1dCandidate
Nebraska State AGbd_f836ed11a38ddf182025-05-08 · +1dVerified

Name: Lepant Law Office
norm: lepant law office
Domain: lepantlaw.com

Name: Lepant Law Office
norm: lepant law office
Domain: lepantlaw.com
Industry: Professional Servicesllm

Discovered: Mar 5, 2025
Breach occurred: Mar 5, 2025 – Mar 5, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 7, 2025
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Attorney General
Initial access: external_remote_services

During the incident: Disconnected the infected server
Removed the bad actor's access to the firm's systems
Contacted third party advisors to assist in the investigation
Performed a data restore from cloud backup servers
Mailed notification letters to affected New Hampshire residents
Changes made: Implemented additional measures to enhance already existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMay 8 · first

Nebraska State AGMay 8 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lepant-law-office-20250509.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 9, 2025
Raw hash: c16238b18ad7fa2a1146e3fe7824e269b9602d6c7e4b252c20a7eeaecf00be6b

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityLepant Law Office

Victim entityLepant Law Office

Incidentdiscovered Mar 5, 2025

Stated responseDisconnected the infected server

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov