Stevens & Lee, P.C.

Stevens & Lee, a business sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2021-06-28 and filed notice on 2022-04-08. 1,028 Washington residents were affected. 284 days elapsed between awareness and notification. 0 days to identify the breach. 0 days to contain the breach.

Affected (this filing): 1,028

Stevens & Lee, a Pennsylvania law firm, notified the New Hampshire Attorney General of a data breach discovered on June 28, 2021. Unauthorized access to systems may have exposed names, driver's license numbers, and Social Security numbers of 396 NH residents. Notifications were sent on April 7, 2022. The firm engaged forensic investigators and law enforcement, enhanced network security, and provided 24 months of credit monitoring and identity restoration services through IDX.

Affected (this filing): 396

Stevens & Lee, a law firm assisting financial institutions, discovered a sophisticated cyber-attack on June 28, 2021. The investigation revealed that files containing personal information (names and potentially other data) of customers and clients' customers may have been accessed. The firm reported the incident to law enforcement and is offering 24 months of credit and identity monitoring through IDX. No evidence of misuse was found.

Stevens & Lee, a professional services firm, reported a data breach affecting 23,066 individuals. The breach, discovered on June 28, 2021, was described as an external system breach or hacking incident. The compromised information included names in combination with financial account or credit/debit card numbers and their associated security codes or PINs. Affected individuals were notified on April 7, 2022, and offered 24 months of credit and identity monitoring services.

Affected (this filing): 23,066