HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)PIILowContained

Wright, Moore, DeHart, Dupuis & Hutchinson, LLC

bd_e4c7a55302fe5c1b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 11, 2023

Filed

Sep 19, 2024

To disclose

15 months

Affected

16state residents only

Linked

7 records

Confidence

66%

Full breach record for Wright, Moore, DeHart, Dupuis & Hutchinson, LLC →

Wright, Moore, DeHart, Dupuis & Hutchinson, LLC notified individuals of a data security incident discovered on July 11, 2023, involving unauthorized access to personal information. Notification was sent on July 18, 2024. Affected data likely included names. The firm engaged cybersecurity experts and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d15 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 15 months / 436 days

Jul 11, 2023

Discovered

Sep 19, 2024

Filed

vs. sector median

+43 wks slower

This filing is one of 7 records about the same incident.View merged incident

A leak claim by alphv about this victim was first seen 387 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_ad5c3e9784dfab562023-08-29 · +387dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_9511371cc02b3ee62024-09-19Verified by operator
Vermont State AGbd_770f3d75e2da00a72024-09-23 · +4dVerified
California State AGbd_d29a7a549eca7bdd2024-09-24 · +5dVerified by operator
Massachusetts State AGbd_e3d01385e524a45f2024-09-24 · +5dVerified

Show 1 more filing ↓up to 6d gap

Maine State AGbd_988f44a7da50d8472024-09-25 · +6dVerified by operator

Name: Wright, Moore, DeHart, Dupuis & Hutchinson, LLC
norm: wright moore dehart dupuis hutchinson
Domain: wmddh.com

Name: Wright, Moore, DeHart, Dupuis & Hutchinson, LLC
norm: wright moore dehart dupuis hutchinson
Domain: wmddh.com
Industry: Professional Servicesllm

Discovered: Jul 11, 2023
Materiality determined: —
Notification sent: Jul 18, 2024
Affected individuals: 16state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Launched an investigation with the assistance of leading cybersecurity experts
Engaged an independent team to conduct a comprehensive review of all potentially affected data
Implemented additional security features to reduce the risk of a similar incident occurring in the future
Offering a complimentary Equifax Credit Watch Gold membership
Changes made: Implemented additional security features to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(436 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGSep 19 · first

Montana State AGSep 19 · first · this page

Vermont State AG+4d

California State AG+5d

Massachusetts State AG+5d

Maine State AG+6d

Pattern: first filing Sep 19 (IN), last Sep 25 (ME) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1698.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: e8e73e3d9321c20eeb4c9373be49e1733c1598fe8472ac46b9f72e01fa517d96

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityWright, Moore, DeHart, Dupuis & Hutchinson, LLC

Victim entityWright, Moore, DeHart, Dupuis & Hutchinson, LLC

Incidentdiscovered Jul 11, 2023

Stated responseLaunched an investigation with the assistance of leading cybersecurity experts

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov