Kronick Moskovitz Tiedemann & Girard, a California law firm, notified the Maryland Attorney General on January 27, 2025, of a cybersecurity incident detected on August 6, 2024. An unknown third party gained unauthorized access to the firm's network, attempting to encrypt systems (blocked by EDR) and successfully exfiltrating data, which was briefly posted on the dark web. The incident affected 4 Maryland residents, involving Social Security Numbers, dates of birth, and employee benefits information. The firm engaged forensic experts, notified law enforcement, and provided 24 months of credit monitoring to affected individuals.
Affected (this filing): 4