Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHealth (basic)PIIHighContained

Morgan Brown & Joy, LLP

bd_f5782e393ffc2d1e · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 12, 2021

Filed

Nov 8, 2021

To disclose

30 weeks

Affected · nationwide

1,73232 in this filing

Linked

4 filings

Confidence

66%

Full breach record for Morgan Brown & Joy, LLP →

Morgan Brown & Joy, LLP (MBJ), a labor and employment law firm, notified the NH AG of a cybersecurity incident discovered on April 12, 2021. Two email accounts were compromised between Jan 22 and Mar 2, 2021, likely via phishing. Data exposed included names, SSNs, driver's licenses, financial info, and medical info. 1,732 individuals notified (32 NH residents). MBJ engaged forensic investigators, reset passwords, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 80 days

discovery → filing · 30 weeks / 210 days

Jan 22, 2021

Begins

Apr 12, 2021

Discovered

Nov 8, 2021

Filed

vs. sector median

+11 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_430ee28cb46d4e3d2021-11-02 · +6dCandidate
Indiana State AGbd_7a10a0a419bce4832021-11-02 · +6dVerified
Massachusetts State AGbd_fdbdcc9f309779742021-11-02 · +6dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Morgan Brown & Joy, LLP
norm: morgan brown joy
Industry: Professional Servicesllm

Discovered: Apr 12, 2021
Breach occurred: Jan 22, 2021 – Mar 2, 2021
Undetected for: 80 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 2, 2021
Affected individuals: 1,732state + nationwide
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Reset all user passwords
Required further training of attorneys and staff
Instituted additional technological processes
Enhanced security measures
Offered 12 months of complimentary credit monitoring and identity theft restoration services through CyberScout
Changes made: Required further training of attorneys and staff
Instituted additional technological processes
Enhanced security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGNov 2 · first

Indiana State AGNov 2 · first

Massachusetts State AGNov 2 · first

New Hampshire State AG+6d · this page

Pattern: first filing Nov 2 (ME), last Nov 8 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/morgan-brown-joy-20211108.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 8, 2021
Raw hash: 32eaf554a5def1b93b7f0b4f6223174718b384eef2d046d5e39041ae48f950f0

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityMorgan Brown & Joy, LLP

Incidentdiscovered Apr 12, 2021

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov