HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Rodenburg Law Firm

bd_024bc57dbb83a987 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 26, 2025

Filed

Apr 30, 2026

To disclose

35 weeks

Affected

17state residents only

Linked

10 filings

Confidence

67%

Full breach record for Rodenburg Law Firm →

Rodenburg Law Firm notified the New Hampshire Attorney General of a data security incident discovered on August 26, 2025. An unknown third party gained unauthorized access to the firm's network, exposing New Hampshire residents' names, Social Security numbers, payment card information, and medical treatment data. The firm engaged cybersecurity experts, notified law enforcement, and provided 17 affected residents with 12-24 months of credit monitoring via TransUnion. Notification letters were sent starting April 21, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d35 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 35 weeks / 247 days

Aug 26, 2025

Discovered

Apr 30, 2026

Filed

vs. sector median

+18 wks slower

This filing is one of 10 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 142 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_1a74bcdfcf80c00e2025-12-09 · +142dVerified by operator

Regulatory filings (8) · sorted by filing gap

Montana State AGbd_2ad9293ec709d4c32026-04-24 · +6dVerified
Texas State AGbd_53c4f9349bf31efa2026-04-24 · +6dVerified
Massachusetts State AGbd_7a68daed0d73bc122026-04-24 · +6dVerified by operator
Maine State AGbd_a5c6dca43ebda5f72026-04-24 · +6dVerified

Show 4 more filings ↓up to 63d gap

Indiana State AGbd_10184fd32a2663bc2026-04-21 · +9dVerified
Indiana State AGbd_af98f5f1e940fea22026-04-21 · +9dVerified by operator
Nebraska State AGbd_dbfcebfb506b42e42026-04-21 · +9dVerified
California State AGbd_2cb09808286009aa2026-07-02 · +63dVerified by operator

Name: Rodenburg Law Firm
norm: rodenburg law firm
Domain: rodenburgllp.com

Name: Rodenburg Law Firm
norm: rodenburg law firm
Domain: rodenburgllp.com
Industry: Professional Servicesllm

Discovered: Aug 26, 2025
Materiality determined: —
Notification sent: Apr 21, 2026
Affected individuals: 17state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General's Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Engaged the appropriate cybersecurity experts to assist
Notified law enforcement
Provided written notice to seventeen (17) New Hampshire residents
Provided complimentary credit monitoring services through TransUnion for 12-months to 24-months
Changes made: Reviewing and enhancing its information security policies and procedures
Continuously reviewing policies and upgrading security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(247 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Indiana State AGApr 21 · first

Nebraska State AGApr 21 · first

Montana State AG+3d

Texas State AG+3d

Massachusetts State AG+3d

Maine State AG+3d

New Hampshire State AG+9d · this page

California State AG+72d

Pattern: first filing Apr 21 (IN), last Jul 2 (CA) — a 72-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rodenburg-law-firm-20260430.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 30, 2026
Raw hash: f46af7121228b682c1bcb77e86b123f215c4701f9e9df51529350561da9730b2

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityRodenburg Law Firm

Victim entityRodenburg Law Firm

Incidentdiscovered Aug 26, 2025

Stated responseEngaged the appropriate cybersecurity experts to assist

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov