HackingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDPIIMediumContained

Schembre & Gannon, LLC

bd_04fc5f58f9a3240d · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 14, 2026

Filed

Jul 30, 2026

To disclose

11 weeks

Affected

8state residents only

Linked

3 filings

Confidence

66%

Full breach record for Schembre & Gannon, LLC →

Schembre & Gannon LLC notified Massachusetts and other state residents of a cybersecurity incident discovered on May 14, 2026. Unauthorized individuals viewed and copied personal information, potentially including names, SSNs, and DOBs. The firm retained forensic specialists and legal counsel, and is offering 12 months of credit monitoring and fraud assistance via Cyberscout/TransUnion. No actual misuse is known.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d11 weeks discovery → filing

Incident timeline

discovery → filing · 11 weeks / 77 days

May 14, 2026

Discovered

Jul 30, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_c3ff655d49e7d3042026-07-30Verified
Vermont State AGbd_fcfe6390cbb949102026-07-30Verified

Name: Schembre & Gannon, LLC
norm: schembre gannon

Name: Schembre & Gannon, LLC
norm: schembre gannon

Discovered: May 14, 2026
Materiality determined: —
Notification sent: Jul 30, 2026
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Retained legal counsel and third-party forensic specialists to investigate the unusual activity
Began a comprehensive review of the data set to determine what sensitive and/or personal information was potentially impacted
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout, a TransUnion company
Changes made: Providing 12 months of credit monitoring services
Providing proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJul 30 · first

Vermont State AGJul 30 · first

Massachusetts State AGJul 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1253-schembre-gannon-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2026
Raw hash: eac360eeddbcbfd90bd5deb1610cb4693eb0e49c6b50eeba5a9fcb5435b492a8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySchembre & Gannon, LLC

Victim entitySchembre & Gannon, LLC

Incidentdiscovered May 14, 2026

Stated responseRetained legal counsel and third-party forensic specialists to investigate the unusual activity

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov