HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Aldrich Services LLP

bd_0048f7cce8a67d3d · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Oct 1, 2026

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

70%

Full breach record for Aldrich Services LLP →4 incidents on file

Aldrich Services LLP notified the NH Attorney General of unauthorized access to an employee email account between August 22-23, 2026. The incident affected 2 New Hampshire residents, exposing names and Social Security numbers. The investigation is ongoing. Aldrich secured the account, engaged third-party specialists, notified law enforcement, and is offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 22, 2026

Begins

Oct 1, 2026

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_977c023dab01aa0a2026-10-01Verified
California State AGbd_bcccefe40cc7dd062026-10-01Candidate
Oregon State AGbd_349159046bd467c62026-10-21 · +20dVerified

Name: Aldrich Services LLP
norm: aldrich services

Name: Aldrich Services LLP
norm: aldrich services
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Aug 22, 2026 – Aug 23, 2026
Materiality determined: —
Notification sent: Oct 1, 2026
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified federal law enforcementNotified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Secured the involved account
Investigated the activity with the assistance of third-party specialists
Validated the security of relevant Aldrich systems
Reviewed impacted dataset for purposes of identifying any sensitive information
Notified federal law enforcement regarding the event
Notifying relevant regulatory authorities including the three major credit reporting agencies Equifax, Experian, and TransUnion
Changes made: Reviewing and enhancing its existing policies and procedures, as appropriate
Providing access to credit and identity monitoring services for one (1) year, through Experian, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing individuals with guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGOct 1 · first

California State AGOct 1 · first

New Hampshire State AGOct 1 · first · this page

Oregon State AG+20d

Pattern: first filing Oct 1 (MA), last Oct 21 (OR) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aldrich-services-20261001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: 13736132408972ff676e5ffdf188631dae98f404205153a94ca0e009ed8f2198

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAldrich Services LLP

Victim entityAldrich Services LLP

IncidentUnauthorized Access

Stated responseSecured the involved account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov