HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumActive

Kleinberg Lange Cuddy & Carlo LLP

bd_c3a1a5e3e28428dc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 18, 2021

Filed

Oct 25, 2021

To disclose

14 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Kleinberg Lange Cuddy & Carlo LLP →2 incidents on file

Kleinberg Lange Cuddy & Carlo LLP notified the New Hampshire Attorney General of a data security incident affecting one NH resident. The firm learned of improper network access on July 18, 2021, and determined on August 6, 2021, that the resident's name and Social Security number may have been compromised. The firm engaged cybersecurity experts, reported the matter to the FBI, and offered 12 months of identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 99 days

Jul 18, 2021

Discovered

Oct 25, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8079c57b939d83512021-10-24 · +1dVerified

Name: Kleinberg Lange Cuddy & Carlo LLP
norm: kleinberg lange cuddy carlo
Domain: kleinberglange.com

Name: Kleinberg Lange Cuddy & Carlo LLP
norm: kleinberg lange cuddy carlo
Domain: kleinberglange.com
Industry: Professional Servicesllm

Discovered: Jul 18, 2021
Materiality determined: —
Notification sent: Aug 26, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Engaged third-party cybersecurity experts to investigate
Reported the matter to the FBI
Provided cooperation to law enforcement
Enhanced the security of its systems/network
Offered 12 months of identity monitoring services through Experian
Changes made: Enhanced the security of its systems/network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 24 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kleinberg-lang-cuddy-carlo-20211025.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2021
Raw hash: c1f9193b5af0dff4bc4f6e6d929f1f6e6328e5894c40b84d3043ecb70fdbb9a8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKleinberg Lange Cuddy & Carlo LLP

Victim entityKleinberg Lange Cuddy & Carlo LLP

Incidentdiscovered Jul 18, 2021

Stated responseEngaged third-party cybersecurity experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov