Social EngineeringProfessional ServicesProfessional ServicesPhishingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Joseph A. Cannova, CPA, CFP®

bd_063c7941d80c5db7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 9, 2025

Filed

Jun 8, 2026

To disclose

26 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Joseph A. Cannova, CPA, CFP® →

Joseph A. Cannova CPA CFP notified the New Hampshire Attorney General on June 9, 2026, of a data security incident discovered on December 9, 2025. Suspicious activity in an employee email account led to unauthorized access to files containing names and Social Security numbers of approximately one New Hampshire resident. The firm engaged cybersecurity experts, provided 12 months of credit monitoring via IDX, and issued notices to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 26 weeks / 181 days

Dec 9, 2025

Discovered

Jun 8, 2026

Filed

vs. sector median

+7 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_6cae05f2cb19a1492026-06-09 · +1dCandidate

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Joseph A. Cannova, CPA, CFP®
norm: joseph a cannova cpa cfp
Domain: jcannova.com
Industry: professional_services
Industry: Professional Servicesllm

Discovered: Dec 9, 2025
Materiality determined: —
Notification sent: Jun 8, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged cybersecurity experts to assist with the process
Provided individuals whose personal information was potentially affected with access to complimentary credit monitoring services for 12 months through IDX
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(181 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 8 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/joseph-a-cannova-cpa-cfp-20260608.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 8, 2026
Raw hash: 4dcff614323d180218485f41b70bbad3d6576c6243684125e8d773263ec6773f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityJoseph A. Cannova, CPA, CFP®

Incidentdiscovered Dec 9, 2025

Stated responseEngaged cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov