Wisner Baum

Summary

Wisner Baum experienced a data breach that exposed Social Security numbers, bank account information and medical records of individuals whose data the firm held. The breach was linked to a cyber‑attack on the firewall provider SonicWall, after which the firm notified the attorneys general of Vermont and California. Two class‑action lawsuits were subsequently filed against the firm by Wucetich & Korovilas and Cole & Van Note, alleging inadequate protection of the compromised information.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On October 8, 2025, the firewall software company SonicWall experienced a cyber‑attack that was disclosed to Wisner Baum the following day, October 9. Wisner Baum then investigated the incident and, on January 23, 2026, notified the attorneys general of Vermont and California that a data breach had occurred. In those notifications the firm stated that the breach had exposed personal information including Social Security numbers, bank account details and medical records of individuals. The breach was described by Managing Partner R. Brent Wisner as being directly tied to the SonicWall attack. The timeline indicates that the breach remained undisclosed for more than three months before the formal state notifications were made.

Following the January 23 disclosures, two class‑action lawsuits were filed against Wisner Baum in U.S. District Court, one on Friday and the other on Monday of the week beginning January 30, 2026. The plaintiffs in the suits are the law firms Wucetich & Korovilas and Cole & Van Note. As of the article’s publication, the cases were pending in federal court, with no settlement or judgment reported. The incident has thus resulted in both regulatory notifications and civil litigation concerning the handling of the compromised data. The article reporting these events was published on February 2, 2026.

Sources

Sources available to members: 1 source.