Troutman Pepper Hamilton Sanders LLP

Dallas County, Texas notified the NH Attorney General of a cybersecurity incident discovered on Oct 19, 2023. The incident impacted 5 NH residents, involving SSNs and basic PII. The County engaged forensic specialists, deployed EDR, forced password resets, and offered credit monitoring. Notices were sent starting July 10, 2024.

Troutman Pepper Hamilton Sanders LLP notified the NH Attorney General of a ransomware incident detected on Feb 8, 2023. Unauthorized access led to file exfiltration. PII and PHI of ~10 NH residents were impacted. Notification sent Dec 4, 2023. FBI notified. Credit monitoring offered.

Troutman Pepper Hamilton Sanders LLP experienced a ransomware attack on February 8, 2023, resulting in unauthorized access and exfiltration of personal and protected health information. The firm detected the incident on the same day but determined the scope of compromised data in November 2023. Affected individuals are offered 12 months of credit monitoring and fraud assistance.

Troutman Pepper Hamilton Sanders LLP reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-04. 90 Massachusetts residents were affected. The report records the breach type as electronic.

Troutman Pepper Hamilton Sanders LLP experienced a ransomware attack on February 8, 2023, resulting in unauthorized access and exfiltration of files containing personal and protected health information. The firm detected the incident on the same day but determined the scope of affected data in November 2023. Affected individuals are offered 12 months of credit monitoring and fraud assistance.

Troutman Pepper Hamilton Sanders LLP notified Montana and Rhode Island residents of a February 8, 2023 ransomware attack. Unauthorized access resulted in the exfiltration of PII and PHI. The firm engaged forensic experts, notified law enforcement, and offered 12 months of credit monitoring. No specific total count was provided, though 4 Rhode Island residents were explicitly named.

Allegheny County, PA, notified the Idaho Attorney General on July 28, 2023, of a MOVEit vulnerability exploit by the Cl0p ransomware group. The incident occurred May 28-29, 2023, affecting 12 Idaho residents. Data exposed included names, SSNs, DOBs, driver's licenses, and some medical/financial info. The County patched the vulnerability, engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.

Troutman Pepper guides clients from startups to multinationals in their most critical legal and business matters. Our attorneys and other professionals provide comprehensive and practical advice that advances our clients’ business objectives, anticipates hurdles, and positions each client to succeed in rapidly evolving markets and regulatory environments.Our platform of 23 offices across the U.S. allows us to meet our clients where they are – and wherever they need us to be. We have deep, unique experience in the industry sectors that will power the national and global economy in the years ahead, including energy, financial services, health sciences, insurance, and private equity. Our service offerings span transactional, regulatory, and litigation practices, covering everything from advertising to zoning.SITE: www.troutman.com Address 600 Peachtree St NE Ste 5200Atlanta, Georgia, 30308United States

Center for Sustainable Energy (CSE) notified the New Hampshire Attorney General of a data security incident discovered on November 17, 2021. Cybercriminals claimed access to CSE systems. CSE determined that the name, address, and Social Security numbers of two New Hampshire residents were potentially acquired. CSE engaged forensic investigators, implemented safeguards, and offered 12 months of credit monitoring. No evidence of misuse was found.

Progrexion ASG, Inc. notified NH AG of an incident discovered April 8, 2021, affecting 3 NH residents. A malicious actor used stolen personal info (SSN, DOB) from a third party to circumvent platform controls and access consumer FICO scores and account details. Progrexion took platforms offline and notified NCCIC. Affected data included FICO scores, account numbers, and institution identity.

Progrexion ASG, Inc. notified Washington AG that on April 8, 2021, a malicious third party used stolen consumer PII (SSN, DOB) to bypass authentication controls on its public-facing platforms. The actor accessed FICO scores, account numbers, and limited transaction data for 150 Washington residents. Progrexion took platforms offline, notified NCCIC, and offered 24 months of identity theft protection.

Progrexion ASG, Inc. notified regulators of a potential incident discovered April 8, 2021, where a malicious third party used stolen consumer credentials to access its public platform, Credit Snapshot. The actor accessed names, SSNs, DOBs, and FICO scores. Progrexion took the app offline, added authentication controls, and is offering credit monitoring.

Kroto Inc. d/b/a iCanvas notified NH AG of a data incident where an unauthorized script on its checkout page captured customer PII and payment card details. Discovered May 28, 2020; script placed ~May 10, 2020. 36 NH residents affected. Remediation included script removal, law enforcement notification, and 12 months of credit monitoring.

American Tire Distributors, Inc. notified the NH Attorney General of a phishing incident on January 9, 2019, where employees provided credentials to attackers posing as HR. One New Hampshire resident was affected, with potential exposure of name, SSN, driver's license, and financial account numbers. The company engaged forensic investigators and offered 24 months of credit monitoring.

Hayden, Narey & Persich (HNP), a CPA firm, notified the NH Attorney General of a data incident affecting 2 NH residents. A malicious actor accessed HNP's system via Remote Desktop on July 3-4, 2017. Data potentially exposed included names, addresses, SSNs, and financial gains/losses. HNP engaged forensic investigators, notified law enforcement (FBI, IRS), and provided one year of credit monitoring.

Major League Lacrosse notified the NH Attorney General of a data incident where a link to a player pool registration spreadsheet was published with an exposed second tab containing PII. The incident was discovered on August 24, 2017. 22 NH residents were potentially affected. MLL disabled the link, notified credit bureaus, and offered 24 months of credit monitoring.

Hand & Upper Extremity Centers dba Hand Rehabilitation Specialists notified NH AG of a potential network breach discovered July 5, 2017. Affects 2 NH residents. Data may include PII, SSN, PHI, and financial info. Investigation ongoing with FBI/Ventura County Sheriff. No evidence of exfiltration found yet. Credit monitoring offered.

Sadd Velazquez Higashi Shammaa, LLP notified the NH AG of unauthorized access to its tax program system between May 1-3, 2017, discovered June 8, 2017. 7 NH residents affected. Data included names, DOBs, SSNs, and financial account info. Response included forensic investigation, law enforcement notification, and 1-year credit monitoring.