MalwareProfessional ServicesProfessional ServicesRansomwareStolen CredentialsData ExfiltratedCustomer Data InvolvedMulti-Stage ChainGovernment IDIdentity (basic)Financial accountMediumActive

Lechtenberg Law Office, LLC

bd_d653a46d9c459356 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 18, 2026

Filed

Apr 13, 2026

To disclose

26 days

Affected

14scope not determined

Confidence

66%

Full breach record for Lechtenberg Law Office, LLC →

Lechtenberg Law Office, LLC (dba Bauch & Lechtenberg Law) reported a data security incident to the Iowa AG on April 13, 2026. On March 17, 2026, a bad actor installed malware on a workstation and filed 14 fraudulent tax returns using client data. The Iowa Dept of Revenue notified the firm on March 18. The firm engaged a cybersecurity firm, which removed the malware on March 29. Data compromised includes SSNs, DOBs, bank account numbers, driver's license numbers, addresses, and phone numbers. Notices were mailed to affected clients on April 9, 2026, offering 24 months of Experian IdentityWorks services. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday26 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 26 days

Mar 17, 2026

Begins

Mar 18, 2026

Discovered

Apr 13, 2026

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed14 affectedView incident

Name: Lechtenberg Law Office, LLC
norm: lechtenberg law office
Domain: traer.net
Industry: professional_services

Name: Lechtenberg Law Office, LLC
norm: lechtenberg law office
Domain: traer.net
Industry: professional_services
Also named: Lechtenberg Law Office, LLCdba oflegal entity
Bauch & Lechtenberg Law Officedba oftrade name
Industry: Professional Servicesllm

Discovered: Mar 18, 2026
Breach occurred: Mar 17, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2026
Affected individuals: 14scope not determined
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Iowa Department of Revenue Fraud DepartmentNotified Internal Revenue Service Stakeholder Liaison and RICS
Initial access: external_remote_services

During the incident: Engaged the services of a cybersecurity firm to determine what had happened
Contacted the tax software's fraud department
Contacted the Internal Revenue Service Stakeholder Liaison and its Return Integrity & Compliance Services (RICS) division
Submitted a list of affected social security numbers to RICS
Mailed out a letter to notify affected clients
Offering two years of complimentary identity theft and credit restoration services through Experian
Changes made: Reviewing its systems to identify and address security vulnerabilities
Taking part in the IRS's Practitioner Relief 'Opt-In' Program to help verify clients' actual tax returns
Working with a cybersecurity firm to strengthen security measures to prevent future data security incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/4132026_Lechtenberg_Law_Office_LLC__F26B3EC8F82EC.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 13, 2026
Raw hash: f2924f27378e67973806a2139fd32ebda963afc92eb9bb9cd9e416bf81f2c006

Reporting entityLechtenberg Law Office, LLC

Victim entityLechtenberg Law Office, LLC

Incidentdiscovered Mar 18, 2026

Stated responseEngaged the services of a cybersecurity firm to determine what had happened

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov