Orrick, Herrington & Sutcliffe LLP

Orrick, Herrington & Sutcliffe LLP notified the New Hampshire Attorney General of a cybersecurity incident detected in March 2023. The breach compromised the personal and protected health information of 637,620 individuals, including vision plan members. The firm engaged forensic investigators, notified law enforcement, and offered two years of complimentary credit monitoring. A class action settlement of $8 million was approved to resolve claims regarding the breach.

Affected (this filing): 637,620

Orrick, Herrington & Sutcliffe LLP reported an external system breach that occurred on February 28, 2023, and was discovered on March 13, 2023. The breach compromised the names and Social Security numbers of 637,620 individuals. The firm began notifying affected individuals on September 14, 2023, and offered two years of identity monitoring services through Kroll.

Affected (this filing): 637,620