No need to hack when it’s leaking: Dalbir Singh & Associates law firm edition
Source: DataBreaches.net · Category: Ransomware & Breach
Dalbir Singh & Associates (NY immigration law firm) exposed misconfigured Amazon S3 bucket containing sensitive client data; firm ignored responsible disclosure warnings and re-exposed data after remediation. Extortion attempts underway. Client notification obligations likely triggered under NY GBL §668 and NYDFS; regulatory reporting to NY AG recommended.