MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Kingsley and Kingsley Lawyers

bd_f0918a57511e7280 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 22, 2021

Filed

Apr 15, 2022

To disclose

34 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for Kingsley and Kingsley Lawyers →

Kingsley and Kingsley Lawyers experienced a ransomware attack on August 21-22, 2021, affecting two servers. The attacker encrypted data, potentially accessing PII including names and Social Security numbers. The firm disconnected the servers, engaged forensic investigators, and notified law enforcement. Affected individuals were offered one year of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 34 weeks / 236 days

Aug 21, 2021

Begins

Aug 22, 2021

Discovered

Apr 15, 2022

Filed

vs. sector median

+15 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_0748c9684dc09cf32022-04-15Verified
Massachusetts State AGbd_25d81f706178edbd2022-04-15Verified
New Hampshire State AGbd_73097b477c5e10af2022-04-18 · +3dVerified
Oregon State AGbd_57ab81d7d9549f3a2022-04-07 · +8dVerified

Show 2 more filings ↓up to 14d gap

Indiana State AGbd_36ea5ef01e481ba62022-04-01 · +14dVerified
Montana State AGbd_660598c74cbcbc122022-04-01 · +14dVerified by operator

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers

Name: Kingsley and Kingsley Lawyers
norm: kingsley and kingsley lawyers
Industry: Professional Servicesllm

Discovered: Aug 22, 2021
Breach occurred: Aug 21, 2021 – Aug 22, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Consulting with appropriate law enforcement authorities

During the incident: Physically disconnected the two servers from the network and powered them down
Commenced a thorough investigation
Engaged forensic investigators and expert legal counsel
Consulting with appropriate law enforcement authorities
Secured the services of Kroll to provide identity monitoring at no cost for one year
Changes made: Implemented additional technical, administrative, and personnel safeguards
Educated employees on identifying and responding to security incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 34 weeks(236 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 1 · first

Montana State AGApr 1 · first

Oregon State AG+6d

Maine State AG+14d

Massachusetts State AG+14d

California State AG+14d · this page

New Hampshire State AG+17d

Pattern: first filing Apr 1 (IN), last Apr 18 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-552632
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2022
Raw hash: 7cda23971d2a7d0313010935dbc01869d4446dcdbbac5c104bf5b8dd9ec3f715

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityKingsley and Kingsley Lawyers

Victim entityKingsley and Kingsley Lawyers

Incidentdiscovered Aug 22, 2021

Stated responsePhysically disconnected the two servers from the network and powered them down

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov