WARNER NORCROSS & JUDD LLP
ent_a74d2c6b64bdc9ddaece8911
Disclosures
16
State AG · HHS OCR · Leak Site · 11 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
255,160
nationwide · State AG OR
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- WARNER NORCROSS & JUDD LLP
- Normalized
- warner norcross judd— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300VJS00ZH5WW8L63
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- wnj.com
Disclosure history (16)newest first
- Washington State AGas victim2022-08-26
Warner Norcross & Judd, LLP (WNJ), a legal services provider, reported a ransomware incident on October 22, 2021, affecting approximately 780 Washington residents. The breach compromised names and health-related information. WNJ engaged forensic investigators, secured its network, and sent notification letters with complimentary identity monitoring services starting August 5, 2022.
- Oregon State AGas victim2022-08-26
Warner, Norcross & Judd LLP reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-26. The breach occurred during 10/22/2021. The breach was discovered on 10/22/2021. 255,160 individuals were affected. Notice was sent on 8/24/2022.
- California State AGas victim2022-08-25
Warner Norcross and Judd, LLP notified the California Attorney General of a data security incident. The firm learned of unauthorized activity on October 22, 2021. The breach date listed on the form is June 28, 2021. The incident involved the potential access of names. The firm engaged a digital forensics firm, secured its network, and offered complimentary credit and identity monitoring services through IDX.
- MICHIGANHHS OCRas victim2022-08-24
The business associate (BA), Warner Norcross and Judd, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 255,160 individuals. The PHI involved included names, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.
- California State AGas victim2022-08-17
Warner Norcross and Judd, LLP notified the California Attorney General of a data security incident. The firm learned of unauthorized activity on October 22, 2021. The breach window is listed as June 28, 2021, to October 22, 2021. Affected data included names. The firm engaged forensic investigators, secured its network, and offered identity monitoring services to affected individuals.
- Maine State AGas victim2022-08-17
The law firm Warner Norcross and Judd reported an external system breach that occurred between June 28, 2021, and October 22, 2021. The breach was discovered on October 22, 2021, and affected 214,439 individuals, compromising names and Social Security Numbers. The firm began notifying affected individuals in writing on August 5, 2022, and offered 12 months of credit monitoring and identity theft protection services.
- South Carolina State AGas victim2022-08-16
Warner Norcross & Judd LLP notified clients of a data security incident discovered on October 22, 2021, involving unauthorized access to systems containing client names. The firm engaged forensic investigators and offered 24 months of credit and identity monitoring through IDX.
- Montana State AGas victim2022-08-16
Warner Norcross & Judd, LLP notified Montana residents of a data security incident discovered on October 22, 2021. Unauthorized activity involving systems containing personal information (names) was detected. The firm engaged forensic investigators and offered credit monitoring services.
- Washington State AGas victim2022-08-15
Warner Norcross & Judd, LLP, a Michigan-based legal services provider, experienced a ransomware incident on October 22, 2021. The breach compromised personal information, including names, SSNs, and driver's license numbers, of approximately 747 Washington residents. WNJ retained cybersecurity experts, secured its environment, and sent notification letters on August 5, 2022, offering complimentary identity monitoring services.
- Oregon State AGas victim2022-08-15
Warner Norcross & Judd, LLP reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-15. The breach occurred during 10/22/2021. The breach was discovered on 10/22/2021. 214,439 individuals were affected. Notice was sent on 8/5/2022.
- Maine State AGas victim2022-07-11
Maine Attorney General data breach notice for Warner Norcross and Judd, LLP. An external system breach (hacking) occurred on 06/28/2021, affecting 19,280 individuals, including 7 Maine residents. Acquired data included names and Social Security Numbers. Notification was sent on 07/11/2022, offering 12 months of credit monitoring and identity restoration services.
- Massachusetts State AGas victim2022-07-11
Warner Norcross and Judd, LLP reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-07-11. 1,157 Massachusetts residents were affected. The report records the breach type as electronic.
- Indiana State AGas victim2022-07-11
Warner Norcross & Judd, LLP reported a data breach to the Indiana Attorney General. The breach occurred on 2021-06-01 and was reported on 2022-07-11. 2,415 Indiana residents were affected. 19,274 individuals affected in total.
- California State AGas victim2022-07-11
Warner Norcross and Judd, LLP experienced a data security incident involving unauthorized access to systems containing client names. The firm learned of the activity on October 22, 2021, and engaged forensic investigators. The breach date is listed as June 28, 2021. Identity monitoring services were provided to affected individuals.
- Illinois State AGas victim2022-01-01
WARNER NORCROSS AND JUDD filed a data-breach notice with the Illinois Attorney General during 2022 (case 2022-441). The register records the breach as discovered on October 22, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.
- GLOBALLeak Siteas victim2021-10-22