Herron Todd White
bd_c273d490eb21e76c · schema v1 · pii pii-v1
Full breach record for Herron Todd White →3 incidents on fileThreat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Meow on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
<p>Dear customers!<\/p><p>We are excited to offer exclusive access to over 298 GB of confidential data from Herron Todd White HTW, one of Australias largest independent property valuation and advisory firms. With expertise spanning residential, commercial, and rural property sectors, HTW provides clients with comprehensive market insights and tailored solutions to meet their unique property needs.<\/p><p>Key Areas of Expertise:<br>Residential Valuations: Supporting homeowners, buyers, and investors with accurate valuations to make informed decisions.<br>Commercial Valuations: Providing services for offices, retail spaces, and industrial properties to aid business transactions and portfolio management.<br>Rural and Agribusiness Valuations: Delivering specialized insights for agricultural properties and enterprises tailored to the unique requirements of the farming sector.<br>Advisory Services: Offering market analysis, feasibility studies, and investment consultancy to guide clients through complex property decisions.<br>Market Reporting: Publishing a monthly market report to provide up to date trends and developments in property markets across Australia.<\/p><p>HTW is committed to delivering high quality, value driven solutions to help clients achieve their goals while being a trusted leader in the Australian property advisory landscape.<\/p><p>This comprehensive data pack includes:<br>Employee data: Personal details, passport and drivers license scans.<br>Client information: Contact details, valuation and advisory service records.<br>Contracts and agreements: Insurance policies, service agreements, and business contracts.<br>Financial documents: Invoices, tax notifications, bank statements.<br>Personal data: Dates of birth, banking information, identification documents.<br>Medical records: Health certificates, insurance details.<br>Legal and correspondence records: L
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Nov 14, 2024
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
meow
According to ransomware.live, Meow emerged in 2022 (resurfacing aggressively in 2024), initially operating as a RaaS using the Conti v2 codebase before transitioning to a data-extortion-only model — selling stolen data rather than encrypting files — with a heavy focus on US healthcare and medical research organizations.