Heidell, Pittoni, Murphy & Bach, LLP

Heidell, Pittoni, Murphy & Bach, LLP (also known as HPM&B) is a law firm organized as a limited liability partnership. Its headquarters are located in the United States of America. The firm provides legal services to clients across various practice areas. As an LLP, the partners share management responsibilities while limiting personal liability for the partnership's debts. This structure is common among professional service firms seeking to balance operational flexibility with liability protection.

In December 2021 the firm detected suspicious activity on its internal network that led to unauthorized access. The intrusion potentially exposed names, birth dates, Social Security numbers and treatment details of more than 114,000 individuals. Upon confirming the breach, the organization notified federal health authorities as required by applicable breach‑notification rules. In response, the firm revised its system security protocols and updated its information management procedures. These measures were intended to strengthen safeguards and reduce the likelihood of similar incidents in the future.

The types of data involved—personal identifiers and medical information—are protected under federal health privacy statutes such as HIPAA. Notifying federal health authorities demonstrates the firm's compliance with mandatory reporting obligations for breaches affecting health‑related data. The post‑incident revisions to security protocols and information management practices reflect a standard remediation approach aimed at mitigating identified vulnerabilities. As a U.S.–based limited liability partnership, the firm is subject to state partnership laws and the regulatory framework governing attorney conduct. These legal and regulatory requirements shape how the firm manages client information and maintains its professional obligations.