Louisiana-based mid-sized accounting firm Wright, Moore, DeHart, Dupuis, and Hutchinson had information from 127,431 customers compromised following a data breach in late June 2023, according to SC Media.
While suspicious network activity was already identified in July 2023, the full extent of the incident was only determined in early September, with WMDDH disclosing the exfiltration of customers' names, Social Security numbers, financial account numbers, driver's license numbers, passport numbers, and medical and treatment details.
Despite not being subject to the four-day reporting rule imposed by the Securities and Exchange Commission, such a 10-month wait to ascertain the impact of the breach was noted by SlashNext Email Security Field Chief Technology Officer Stephen Kowski to be worrisome and should be addressed with the use of a multi-pronged approach involving automated data discovery tools.
"Combining the latest AI technology with skilled personnel and streamlined processes can also help reduce investigation timelines and improve incident response," Kowski added.
