HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICCriticalContained
Orrick, Herrington & Sutcliffe LLP
bd_d10cdbb5d734268c · schema v1 · pii pii-v1
Full breach record for Orrick, Herrington & Sutcliffe LLP →Orrick, Herrington & Sutcliffe LLP reported an external system breach (hacking) occurring on 02/28/2023 and discovered on 03/13/2023. The incident affected 152,818 individuals, including 1 Maine resident. Personal information acquired included names and Social Security Numbers. The firm provided written notification and offered 24 months of complimentary identity monitoring services through Kroll.
Maine clockDiscovered Mar 13, 2023 → Filed with AG Jul 20, 2023129d ✗ ME AG >90d18 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 13 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_e91b9e52ec6efee0Maine State AGfiled 2023-07-20Verified
- bd_eb15c77ac453f478California State AGfiled 2023-07-20Verified
- bd_cbf3d3e27848f13eCalifornia State AGfiled 2023-07-31(11d gap)Verified
- bd_4e6e3b6b46e7862bNew Hampshire State AGfiled 2023-07-03(17d gap)Verified
Show 6 more filings ↓Show fewer ↑up to 32d gap
- bd_47f8b56acf0704e4Oregon State AGfiled 2023-06-30(20d gap)Verified
- bd_6acd93d28371c8a0Washington State AGfiled 2023-06-30(20d gap)Verified
- bd_3fe3320cbc86fe1bCalifornia State AGfiled 2023-08-14(25d gap)Verified
- bd_2219323be28eb8d7Oregon State AGfiled 2023-08-18(29d gap)Verified
- bd_cc48c408ae3ef894Maine State AGfiled 2023-08-18(29d gap)Verified
- bd_13c2d48c6c504f77California State AGfiled 2023-08-21(32d gap)Verified
Showing first 10 of 12 linked disclosures.
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b4b6a3bb-f568-4a3c-8a4e-e489f7c1eefc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 20, 2023
- Raw hash
- d5b3aaabf7146f53459b785c547d03cddc61f8887be316ec26030ace2c4864ea
Reporting entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Victim entity
- Name
- Orrick, Herrington & Sutcliffe LLPnorm: orrick herrington sutcliffe
- Domain
- orrick.com
Incident
- Discovered
- Mar 13, 2023
- Materiality determined
- —
- Notification sent
- Jul 20, 2023
- Affected individuals
- 152,818
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 18 weeks(129 days from discovery to filing)
- Compliance flags
- ME AG >90d · 129dME resident >60d · 129d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 13, 2023→ Filed with AG: Jul 20, 2023129d 90 days ME AG >90d Maine Discovered: Mar 13, 2023→ Notified: Jul 20, 2023129d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.