HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

Kerber, Eck & Braeckel LLP

bd_fb4c0e75881d7b4f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 7, 2023

Filed

Sep 30, 2024

To disclose

20 months

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Kerber, Eck & Braeckel LLP →4 incidents on file

Kerber, Eck & Braeckel LLP (KEB) reports a supplemental breach affecting one New Hampshire resident. Unauthorized access occurred Jan 27–Feb 7, 2023. KEB discovered suspicious activity on Feb 7, 2023. Impacted data includes identity and government IDs. KEB engaged law enforcement, implemented threat detection tools, and offers credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d20 months discovery → filing

Incident timeline

undetected · 11 days

discovery → filing · 20 months / 601 days

Jan 27, 2023

Begins

Feb 7, 2023

Discovered

Sep 30, 2024

Filed

vs. sector median

+67 wks slower

This filing is one of 4 about the same incident.View merged incident

A leak claim by alphv about this victim predates this filing by 562 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_93429903c0f5503e2023-03-18 · +562dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_01af67a4919197c12023-03-17 · +563dVerified
Vermont State AGbd_5633211a82c1e7cf2023-03-17 · +563dCandidate

Name: Kerber, Eck & Braeckel LLP
norm: kerber eck braeckel

Name: Kerber, Eck & Braeckel LLP
norm: kerber eck braeckel
Industry: Professional Servicesllm

Discovered: Feb 7, 2023
Breach occurred: Jan 27, 2023 – Feb 7, 2023
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 30, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Reported this event to federal law enforcementProviding notice to relevant state and federal regulators

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of KEB systems
Identified potentially affected individuals
Implemented an advanced threat detection and response tool throughout the network
Reviewed existing policies and procedures related to data security
Reported this event to federal law enforcement
Providing access to credit monitoring services for individuals whose Social Security number was potentially affected
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implemented an advanced threat detection and response tool throughout the network
Reviewing existing policies and procedures related to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 months(601 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 17 · first

Vermont State AGMar 17 · first

New Hampshire State AG+563d · this page

Pattern: first filing Mar 17 (IN), last Sep 30 (NH) — a 563-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kerber-eck-braeckel-20240930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2024
Raw hash: 7f15df0ef2b02c5ac72beb4c286150317f6de0168c9d3b27f42cc89b6e7b0e64

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityKerber, Eck & Braeckel LLP

Victim entityKerber, Eck & Braeckel LLP

Incidentdiscovered Feb 7, 2023

Stated responseMoved quickly to investigate and respond to the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov