PILLSBURY WINTHROP SHAW PITTMAN LLP

Humana Inc. notified the New Hampshire Attorney General of a security incident involving its law firm, Pillsbury Winthrop Shaw Pitman LLP. In April 2025, Pillsbury was targeted by social engineering (phishing). An unauthorized actor downloaded Humana litigation documents containing PHI, PII, and financial data. Discovery occurred in December 2025. One NH resident was affected. Notifications were sent in June 2026, offering 24 months of credit monitoring.

Pillsbury Winthrop Shaw Pitman LLP notified Humana and affected individuals of a security event where sophisticated social engineering (phishing) targeted law firms, allowing an unauthorized actor to download court-case documents belonging to Humana. The breach exposed personal information, including Social Security Numbers, credit/debit card numbers, and bank account numbers. Humana is providing 24 months of free credit monitoring through Equifax. The incident is contained.

Pillsbury Winthrop Shaw Pitman LLP notified Humana patients in Nebraska of a security incident where sophisticated social engineering (phishing) targeted law firms, allowing an unauthorized actor to download documents from Humana's court case files. The breach exposed personal information including Social Security Numbers, credit/debit card numbers, and bank account numbers. Humana offered 24 months of free credit monitoring through Equifax. The incident date is June 1, 2026.

Pillsbury Winthrop Shaw Pitman LLP reported a data breach to the Oregon Attorney General. The breach was reported on 2026-01-16. The breach occurred during 1/1/2001 - 1/1/2001. The breach was discovered on 1/1/2001. 1 individuals were affected. Notice was sent on 1/1/2001.

Pillsbury Winthrop Shaw Pitman LLP based in Los Angeles, California, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-04-30 and reported on 2025-11-07. 39,573 Texas residents were affected. 43,412 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via U.S. Mail.

Pillsbury Winthrop Shaw Pitman LLP disclosed a security incident in late April 2025 where an unauthorized actor accessed firm documents following a social engineering attack. The firm engaged forensic investigators and notified law enforcement. Affected data includes personal information such as names and government IDs. The firm is offering 24 months of credit monitoring via Equifax.

Pillsbury Winthrop Shaw Pitman LLP notified the New Hampshire Attorney General of a security event involving sophisticated social engineering. An unauthorized actor convinced a user to download firm documents, affecting the financial account information of approximately 4 New Hampshire residents. The firm engaged forensic investigators, notified law enforcement, and is offering 24 months of credit monitoring via Equifax. Notifications began November 6, 2025.

Pillsbury Winthrop Shaw Pitman LLP disclosed a security incident in late April 2025 where an unauthorized actor accessed firm documents via sophisticated social engineering. The firm engaged forensic investigators, notified law enforcement, and offered 24 months of credit monitoring. The incident is contained.

Pillsbury Winthrop Shaw Pitman LLP, a law firm, disclosed a security incident in late April 2025 where an unauthorized actor downloaded firm documents following a social engineering attack. The firm notified law enforcement, engaged forensic investigators, and offered 24 months of credit monitoring. The breach impacted client personal information, including names and government IDs.

Pillsbury Winthrop Shaw Pitman LLP notified individuals of a security incident in late April 2025 where an unauthorized actor downloaded firm documents following a social engineering attack. The firm engaged forensic investigators, notified law enforcement, and is offering 24 months of credit monitoring. The specific data types and total affected count were not explicitly enumerated in this notice.

Pillsbury Winthrop Shaw Pitman LLP notified the Iowa AG of a security event in late April 2025 involving sophisticated social engineering. An unauthorized actor downloaded firm documents after convincing a user to enable access. Notices began rolling out November 6, 2025. Data types include PII and government IDs. No specific count of affected individuals was provided in this courtesy notice.

Pillsbury Winthrop Shaw Pitman LLP notified individuals of a security incident in late April 2025 where an unauthorized actor downloaded firm documents following a social engineering attack. The breach exposed personal information including names, Social Security numbers, and financial account numbers. The firm engaged forensic investigators, notified law enforcement, and is offering 24 months of credit monitoring through Equifax.

Pillsbury Winthrop Shaw Pitman LLP reported a data breach to the Indiana Attorney General. The breach occurred on 2025-04-29 and was reported on 2025-11-06. 17 Indiana residents were affected. 43,412 individuals affected in total.

Pillsbury Winthrop Shaw Pitman LLP reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-11-06. 12 Massachusetts residents were affected.

Bank of the West notified NH AG that a third-party service provider used compromised credentials to access employee email accounts, potentially exposing NH resident business names and SSNs. 4 residents affected. Incident discovered March 2, 2018. Notices mailed August 20, 2018. Forensics engaged, law enforcement notified, credit monitoring offered.

Yapstone, Inc. notified the Washington Attorney General of a data breach affecting approximately 5,264 Washington residents. Unauthorized access occurred between July 15, 2014, and August 5, 2014, via a URL vulnerability. The company discovered the incident on August 4, 2015, and sent notifications on September 11, 2015. Exposed data included names, driver's license numbers, bank account numbers, and Social Security Numbers. Yapstone blocked access, retained experts, and provided 24 months of credit monitoring.

Applied Micro Circuits Corporation notified the NH AG that a laptop containing employee names and SSNs was stolen from an employee's locked car on Feb 23, 2011. 65 NH residents were notified. Data was not encrypted. Police were notified.

Pillsbury Winthrop Shaw Pittman LLP notified the New Hampshire Attorney General of a data breach involving its former vendor, Colt Express Outsourcing Services. On May 26, 2008, computers containing employee PII (names, SSNs, DOBs) were stolen during a break-in at Colt's Walnut Creek, CA office. Pillsbury discovered the incident on June 16, 2008, and sent notifications to 3 New Hampshire residents on July 29, 2008. The firm provided credit monitoring services via Kroll Inc.