Marshall & Melhorn, LLC data breach (2023)

OHHHS OCRFirst filinglinked via same-victim cross-source · 100%

Filed Jun 7, 2023bd_25e56e830e87027b

Marshall & Melhorn, LLC (a business associate, OH) reported to HHS on 2023-06-07 a ransomware incident affecting 9,412 individuals. PHI on network servers included names, addresses, dates of birth, Social Security and driver's license numbers, and financial and treatment information. The BA notified HHS, affected individuals, and the media, posted substitute notice on its website, offered free credit monitoring, and implemented additional safeguards. OCR provided technical assistance regarding the HIPAA Security Rule.

Affected (this filing): 9,412

🦬Montana State AGlinked via same-victim cross-source · 100%

🍁Vermont State AGlinked via same-victim cross-source · 100%

Filed Jun 7, 2023bd_fedf4a0256313e98

Marshall & Melhorn, LLC, a law firm, disclosed a cybersecurity incident where an unauthorized actor gained access to its network on September 14, 2021. The breach may have exposed names and other personal data. The firm notified law enforcement, engaged computer specialists, and offered credit monitoring services. The notice was filed with the Vermont Attorney General on June 7, 2023.

VT AG >45 bday

⛰️New Hampshire State AGlinked via same-victim cross-source · 100%

Filed Jun 12, 2023bd_c0884ed19903020b

Marshall & Melhorn, LLC, a law firm, notified the New Hampshire Attorney General of a data event affecting 9 NH residents. On September 14, 2021, an unauthorized actor gained access to the firm's network, potentially accessing files containing PII and SSNs. The firm engaged computer specialists, notified federal law enforcement, implemented additional cybersecurity safeguards, and offered 12 months of credit monitoring via Experian to affected individuals.

Affected (this filing): 9

Marshall & Melhorn, LLC

Litigation Timing

Sensitive data

Timeline