HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Sharp Law LLP
bd_e978ae59f2fd1450 · schema v1 · pii pii-v1
Full breach record for Sharp Law LLP →Sharp Law, LLP notified consumers of a data breach involving unauthorized access to employee email accounts between Nov 2023 and Feb 2024. The incident was investigated by forensic specialists and concluded on June 21, 2024. Customer names were present in affected emails. Sharp Law provided 12 months of identity monitoring via Kroll and implemented additional network safeguards.
Vermont clock⏱ VT AG >14 bday8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d73fba04a9b0ca4fIndiana State AGfiled 2024-08-16Candidate
- bd_f49b4e563b9b258aMaine State AGfiled 2024-08-16Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-08-16-sharp-law-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2024
- Raw hash
- f3751971733f2238ae1559687e1f3790977da05d81427661daae7e1405aa071d
Reporting entity
- Name
- Sharp Law LLPnorm: sharp law
Victim entity
- Name
- Sharp Law LLPnorm: sharp law
Incident
- Discovered
- Jun 21, 2024
- Materiality determined
- Aug 16, 2024
- Notification sent
- Aug 16, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.