HackingStolen CredentialsCapture Stored DataData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Wineberg, Solheim, Howell & Shain PC
bd_f63ca8738fca3edf · schema v1 · pii pii-v1
Full breach record for Wineberg, Solheim, Howell & Shain PC →Wineberg, Solheim, Howell & Shain PC notified Maryland AG of a data security incident discovered Nov 13, 2024. Unauthorized actors acquired files containing names, SSNs, driver's licenses, and health insurance info. 18 Maryland residents notified. Response included forensic investigation, network security, and 12 months of credit monitoring via CyberScout.
Maryland clock✗ MD AG >90d18 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_71e361b88106e06bIndiana State AGfiled 2025-03-18Verified
- bd_ac793e1d1f676207Vermont State AGfiled 2025-03-18Verified
- bd_b070ea70f8abf7e1New Hampshire State AGfiled 2025-03-18Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376569.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2025
- Raw hash
- dac8be269ec91273033ec7b07e1db3afac4b36f24335c630bc1255906b9ebbc4
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Wineberg, Solheim, Howell & Shain PCnorm: wineberg solheim howell shain
Incident
- Discovered
- Nov 13, 2024
- Materiality determined
- —
- Notification sent
- Mar 18, 2025
- Affected individuals
- 18
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 18 weeks(125 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.