MalwareRansomwareRansom DemandedData EncryptedTargetedIDENTITY_BASICLowContained
Sprechman & Associates, P.A.
bd_d19726f54b262626 · schema v1 · pii pii-v1
Full breach record for Sprechman & Associates, P.A. →Berman & Rabin, P.A. notified consumers of a ransomware incident occurring July 5-8, 2024. An unknown actor encrypted files and may have accessed personal information (names and variable data elements). No evidence of identity theft was found. The firm engaged federal law enforcement, secured systems, and offered 12-24 months of credit monitoring via IDX. Rhode Island residents were specifically identified as potentially impacted.
Vermont clock✗ VT AG >45 bday29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_57200978e1d04838New Hampshire State AGfiled 2025-01-28Verified
- bd_67dbf6cb77ebe952Indiana State AGfiled 2025-01-28Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-01-28-berman-rabin-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2025
- Raw hash
- 192ec85e17609bf957aa5f4abcd5dd969afd9a7a9430eb1583d586cfc20ca9de
Reporting entity
- Name
- Sprechman & Associates, P.A.norm: sprechman associates
Victim entity
- Name
- Sprechman & Associates, P.A.norm: sprechman associates
Incident
- Discovered
- Jul 8, 2024
- Materiality determined
- Oct 8, 2024
- Notification sent
- Jan 23, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 29 weeks(204 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.