Waters & Kraus, LLP

Waters & Kraus LLP, a law firm, reported a data breach involving unauthorized access to employee email accounts between December 5, 2019, and May 15, 2020. An unauthorized party accessed certain accounts, potentially viewing emails and attachments containing personal information of clients and business contacts. The firm engaged a cybersecurity firm, secured the environment, and offered one year of credit monitoring to affected individuals.

Waters & Kraus LLP, a business sector entity reported a phishing incident to the Washington Attorney General. The organization became aware of the incident on 2020-12-10 and filed notice on 2021-01-13. 522 Washington residents were affected. 34 days elapsed between awareness and notification. 371 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 522