Ott Cone & Redpath, P.A.

Ott Cone & Redpath, P.A. notified the Maryland AG of a criminal cyberattack impacting a firm email account on or about October 31, 2024. The incident affected 93 Maryland residents, exposing names, DOBs, SSNs, and medical/insurance info. Ott Cone engaged third-party experts, secured systems, and provided 12 months of credit monitoring.

Ott Cone & Redpath, P.A., a North Carolina law firm acting as a HIPAA business associate, reported to HHS OCR on 2024-12-18 that an email phishing attack against employees compromised the PHI of 22,171 individuals. Affected data included names, addresses, dates of birth, Social Security numbers, claims and financial information, diagnoses, conditions, and other treatment information. The firm notified HHS, affected individuals, and the media; posted substitute notice; and remediated by adopting encryption, strengthening policies, and adding technical safeguards.

Ott Cone & Redpath, P.A. notified the NH AG of a criminal cyberattack impacting a firm email account on Oct 31, 2024. Six NH residents' PII was potentially accessed. The firm engaged forensic experts, deployed EDR, strengthened email security/MFA, and provided credit monitoring.

Ott Cone & Redpath, P.A. notified Montana residents of a criminal cyberattack on a firm email account discovered on October 31, 2024. The incident involved unauthorized access to PII, including names and variable data. The firm engaged third-party experts, secured systems, and provided 12-24 months of credit monitoring via IDX.

Ott Cone & Redpath, P.A., a law firm based in Greensboro, NC, experienced an external system breach (hacking) on June 3–4, 2024. The breach was discovered on October 31, 2024, approximately five months after it occurred. A total of 12,286 individuals were affected nationwide, including 9 Maine residents. Affected individuals were notified in writing on December 13, 2024. IDX was engaged to provide 12 months of ID restoration and credit monitoring services.