HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountHealth (basic)AuthenticationMediumContained

WSRP, LLC

bd_e2bb65266b857a6c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2022

Filed

Jul 29, 2022

To disclose

6 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for WSRP, LLC →

WSRP, LLC notified individuals of unauthorized access to a network system between April 21 and May 26, 2022. The incident involved fraudulent tax return filings and unauthorized downloading of files containing PII, government IDs, financial data, and health information. WSRP engaged third-party specialists and implemented additional security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 54 days

discovery → filing · 6 weeks / 45 days

Apr 21, 2022

Begins

Jun 14, 2022

Discovered

Jul 29, 2022

Filed

vs. sector median

12 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_57265a60138923f92022-07-29Verified
Indiana State AGbd_9734401fe83e68862022-07-29Verified
New Hampshire State AGbd_55642becea175ee62022-08-02 · +4dVerified

Name: WSRP, LLC
norm: wsrp
Domain: wsrp.com

Name: WSRP, LLC
norm: wsrp
Domain: wsrp.com
Industry: Professional Servicesllm

Discovered: Jun 14, 2022
Breach occurred: Apr 21, 2022 – May 26, 2022
Undetected for: 54 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Authentication
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Secured the system
Launched an investigation with the assistance of third-party computer specialists
Offered complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical security measures
Reviewing and enhancing existing policies and procedures
Conducting additional workforce data privacy training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 29 · first

Indiana State AGJul 29 · first

Montana State AGJul 29 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-453.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2022
Raw hash: 592fd7f0d617f34a65ad416c8ce6e759437b66a36455b0e5b748a574af6730dd

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWSRP, LLC

Victim entityWSRP, LLC

Incidentdiscovered Jun 14, 2022

Stated responseSecured the system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov