MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedRansom DemandedIdentity (basic)Government IDPIIMediumContained

Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

bd_ea25c96fcbea9d6f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 21, 2023

Filed

Aug 21, 2024

To disclose

39 weeks

Affected

4state residents only

Linked

5 records

Confidence

66%

Full breach record for Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C →2 incidents on file

Eckell Sparks, a law firm, experienced a ransomware incident on or about November 21, 2023. The breach potentially compromised clients' dates of birth and Social Security numbers, as well as privileged legal communications. The firm engaged forensic investigators, notified the FBI, and is offering 12 months of credit monitoring. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d39 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 39 weeks / 274 days

Nov 21, 2023

Begins

Nov 21, 2023

Discovered

Aug 21, 2024

Filed

vs. sector median

+20 wks slower

This filing is one of 5 records about the same incident.View merged incident

A leak claim by alphv about this victim was first seen 272 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_a3fa7c76dc9349e92023-11-23 · +272dVerified by operator

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_046cecae47c54f202024-08-22 · +1dVerified
Indiana State AGbd_e2db7d46c30da3f32024-08-19 · +2dVerified by operator
New Hampshire State AGbd_8f628ea1b589d2192024-08-27 · +6dVerified by operator

Name: Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C
norm: eckell sparks levy auerbach monte sloane matthews auslander
Domain: eckellsparks.com

Name: Eckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C
norm: eckell sparks levy auerbach monte sloane matthews auslander
Domain: eckellsparks.com
Industry: Professional Servicesllm

Discovered: Nov 21, 2023
Breach occurred: Nov 21, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: filed a report with the FBIproviding notice to privacy regulators

During the incident: Launched an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Took steps to mitigate the potential impact
Secured the environment in question
Took steps to prevent further unauthorized access
Engaged a third-party digital forensics investigator to conduct an exhaustive investigation
Filed a report with the FBI
Providing notice to privacy regulators
Changes made: Working to implement additional safeguards and security measures to enhance the privacy and security of information in our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(274 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGAug 19 · first

Montana State AG+2d · this page

Vermont State AG+3d

New Hampshire State AG+8d

Pattern: first filing Aug 19 (IN), last Aug 27 (NH) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1615.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2024
Raw hash: 078431ae7fb55a68b3d72ee8dddf4cdc44224709f3859595c6bed065837678e8

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityEckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

Victim entityEckell, Sparks, Levy, Auerbach, Monte, Sloane, Matthews & Auslander, P.C

Incidentdiscovered Nov 21, 2023

Stated responseLaunched an investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov