HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Wolf Haldenstein Adler Freeman & Herz LLP

bd_d2bd2e440c25b739 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 13, 2023

Filed

Jan 15, 2025

To disclose

13 months

Affected

Not disclosed

Linked

16 records

Confidence

66%

Full breach record for Wolf Haldenstein Adler Freeman & Herz LLP →2 incidents on file

Wolf Haldenstein Adler Freeman & Herz LLP detected suspicious network activity on December 13, 2023. An unauthorized actor accessed files containing names, SSNs, employee IDs, and medical information. The firm engaged cybersecurity experts, secured the network, and reviewed data. This updated notice (Jan 10, 2025) informs affected individuals, including 16,071 Rhode Island residents, of the incident and offers credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 13, 2023 → Notified Jan 10, 2025394d ✗ CA 60-day late13 months discovery → filing

Incident timeline

discovery → filing · 13 months / 399 days

Dec 13, 2023

Begins

Dec 13, 2023

Discovered

Jan 15, 2025

Filed

vs. sector median

+37 wks slower

This filing is one of 16 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 390 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Maine State AGbd_59773b3aabb12e552025-01-15Verified
Washington State AGbd_8fc1c900a335fed52025-01-16 · +1dVerified by operator
New Hampshire State AGbd_01c8c467936f5ef02025-01-14 · +1dVerified by operator
Massachusetts State AGbd_8552ef9d273399f82025-01-17 · +2dVerified by operator

Show 6 more filings ↓up to 302d gap

South Carolina State AGbd_9b1cd8fcc3d360312025-01-17 · +2dVerified by operator
Iowa State AGbd_f6dabcb4a2c109fc2025-01-17 · +2dVerified by operator
Indiana State AGbd_3f19b595050c24cc2025-01-13 · +2dVerified
Rhode Island State AGbd_3e9cc9ff1838a31e2025-01-28 · +13dVerified
Maryland State AGbd_747af5a683f6a74f2025-11-13 · +302dVerified by operator
Maryland State AGbd_96d242fcec7fed342025-11-13 · +302dVerified by operator

Showing first 10 of 15 linked disclosures.

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com

Name: Wolf Haldenstein Adler Freeman & Herz LLP
norm: wolf haldenstein adler freeman herz
Domain: whafh.com
Industry: Professional Servicesllm

Discovered: Dec 13, 2023
Breach occurred: Dec 13, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 10, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unknown
Threat actor: External

During the incident: Took steps to secure its network
Engaged a specialized cybersecurity firm to investigate the nature and scope of the incident
Conducted an examination of its systems and networks
Undertook a time-consuming and detailed review of the data stored on the servers
Offering complimentary credit monitoring to individuals who believe they may have been affected
Changes made: Reviewed and enhanced its existing policies and procedures related to data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(399 days from discovery to filing)
Compliance flags: CA 60-day late · 394dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 13, 2023
→ Notified: Jan 10, 2025
394d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 13, 2023 → Notified: Jan 10, 2025	394d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Indiana State AGJan 13 · first

New Hampshire State AG+1d

Maine State AG+2d

California State AG+2d · this page

Washington State AG+3d

Massachusetts State AG+4d

South Carolina State AG+4d

Iowa State AG+4d

Rhode Island State AG+15d

Maryland State AG+304d

Pattern: first filing Jan 13 (IN), last Nov 13 (MD) — a 304-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-597418
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 15, 2025
Raw hash: 1902ab727a2af65986e1bdd3ed9e89963af5314d08f462d2104de545fdeeb4f1

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityWolf Haldenstein Adler Freeman & Herz LLP

Victim entityWolf Haldenstein Adler Freeman & Herz LLP

Incidentdiscovered Dec 13, 2023

Stated responseTook steps to secure its network

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov