HackingProfessional ServicesProfessional ServicesTargetedIdentity (basic)IP / systemLowContained

Simmons Perrine Moyer Bergman PLC

bd_e17fff5a09292fc0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 3, 2023

Filed

May 10, 2024

To disclose

45 weeks

Affected

2state residents only

Linked

5 filings

Confidence

67%

Full breach record for Simmons Perrine Moyer Bergman PLC →

Simmons Perrine Moyer Bergman PLC disclosed unauthorized network access between May 11 and July 3, 2023. The incident compromised client confidential information and names. Approximately 2 Rhode Island residents were explicitly identified as impacted. The firm engaged outside cybersecurity professionals and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday45 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 53 days

discovery → filing · 45 weeks / 312 days

May 11, 2023

Begins

Jul 3, 2023

Discovered

May 10, 2024

Filed

vs. sector median

+27 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 248 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_4f160ea652ff1d832023-09-05 · +248dCandidate

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_d974c0665b9546ef2024-05-10Verified
Massachusetts State AGbd_12f0c49087844ca02024-05-13 · +3dVerified by operator
Maine State AGbd_8556ad1bbd97cf962024-05-13 · +3dVerified by operator

Name: Simmons Perrine Moyer Bergman PLC
norm: simmons perrine moyer bergman
Domain: spmblaw.com

Name: Simmons Perrine Moyer Bergman PLC
norm: simmons perrine moyer bergman
Domain: spmblaw.com
Industry: Professional Servicesllm

Discovered: Jul 3, 2023
Breach occurred: May 11, 2023 – Jul 3, 2023
Undetected for: 53 daysoccurrence → discovery
Materiality determined: May 10, 2024
Notification sent: May 10, 2024
Affected individuals: 2state-resident count only
Data types: Identity (basic)IP / system
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Offering a complimentary membership in Equifax Credit WatchTM Gold
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(312 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 10 · first

Vermont State AGMay 10 · first · this page

Massachusetts State AG+3d

Maine State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2024-05-10-simmons-perrine-moyer-bergman-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 10, 2024
Raw hash: 0df2305992a99deb87ee353e49b23150d7a466b87a1e957373765adde77ca07a

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entitySimmons Perrine Moyer Bergman PLC

Victim entitySimmons Perrine Moyer Bergman PLC

Incidentdiscovered Jul 3, 2023

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov