Warner Norcross + Judd LLP data breach (2022)

FEDERALHHS OCRlinked via same-victim cross-source · 100%

Filed Aug 24, 2022bd_ae40e08f1e80359d

The business associate (BA), Warner Norcross and Judd, reported that it experienced a cyber-attack affecting the protected health information (PHI) of 255,160 individuals. The PHI involved included names, diagnoses, lab results, medications, and other treatment information. The BA notified HHS, the affected individuals, the media, and provided substitute notice. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.

Affected (this filing): 255,160

🐻California State AGlinked via same-victim cross-source · 100%

🦫Oregon State AGlinked via same-victim cross-source · 100%

Filed Aug 15, 2022bd_dfe1fbee0bbd3f4d

Warner Norcross & Judd, LLP reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-15. The breach occurred during 10/22/2021. The breach was discovered on 10/22/2021. 214,439 individuals were affected. Notice was sent on 8/5/2022.

Affected (this filing): 214,439

OR AG >45dLeak >180d

🦬Montana State AGlinked via same-victim cross-source · 100%

Filed Aug 16, 2022bd_c137348086f577f6

Warner Norcross & Judd, LLP reported a data breach to the Montana Attorney General. The breach was reported on 2022-08-16. The breach occurred on 10/22/2021. 237 Montana residents were affected.

Affected (this filing): 237

Leak >180d

🐻California State AGlinked via same-victim cross-source · 100%

Filed Aug 17, 2022bd_0baa95ef76b9eafb

Warner Norcross + Judd LLP (WNJ), a law firm, experienced unauthorized access to some of its systems between June 28 and October 22, 2021. WNJ detected the unauthorized activity on October 22, 2021, engaged a digital forensics firm, and notified affected individuals via letter dated July 11, 2022. Personal information (names and other variable fields) may have been accessed. IDX identity and credit monitoring was offered to affected individuals at no cost.

CA 60-day late · 262dLeak >180d

🦞Maine State AGlinked via same-victim cross-source · 100%

Filed Aug 17, 2022bd_430a60ac669603be

The law firm Warner Norcross and Judd reported an external system breach that occurred between June 28, 2021, and October 22, 2021. The breach was discovered on October 22, 2021, and affected 214,439 individuals, compromising names and Social Security Numbers. The firm began notifying affected individuals in writing on August 5, 2022, and offered 12 months of credit monitoring and identity theft protection services.

Affected (this filing): 214,439

ME AG >90d · 299dME resident >180d · 287dLeak >180d

🌲Washington State AG

Filed Aug 26, 2022bd_338a07619d8801bb

Warner Norcross & Judd, LLP, a business sector entity reported a ransomware incident to the Washington Attorney General. The organization became aware of the incident on 2021-10-22 and filed notice on 2022-08-26. 780 Washington residents were affected. 308 days elapsed between awareness and notification. 0 days to identify the breach.

Affected (this filing): 780

WA AG >90dLeak >180d

🦫Oregon State AGlinked via same-victim cross-source · 100%

Filed Aug 26, 2022bd_aea898af76dc2052

Warner, Norcross & Judd LLP reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-26. The breach occurred during 10/22/2021. The breach was discovered on 10/22/2021. 255,160 individuals were affected. Notice was sent on 8/24/2022.

Affected (this filing): 255,160

OR AG >45dLeak >180d

Warner Norcross + Judd LLP

Litigation Timing

Affected residents by state

Timeline