HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICPHIMediumContained
Tuggle Duggins
bd_084c4a4f09bc5477 · schema v1 · pii pii-v1
Full breach record for Tuggle Duggins →Tuggle Duggins P.A., a law firm, issued a supplemental notice to the New Hampshire Attorney General on February 6, 2026, regarding a data event affecting 2 NH residents. Unauthorized access occurred on October 1, 2024, resulting in the exfiltration of names, Social Security Numbers, and Health Related Information. The firm offered 12 months of credit monitoring via Experian.
Leak gap clock✗ Leak >180d16 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 494 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_04867b4476fadb63Leak Siteblack_bastafiled 2024-10-01(493d gap)Verified
- bd_1039378c59186ab9Leak Siteblack_bastafiled 2024-09-30(494d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_1808f062afe41f74Maine State AGfiled 2026-02-06Candidate
- bd_d6419cff8c261687Vermont State AGfiled 2026-02-06Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/tuggle-duggins-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- 74a4de2bf76dce723a115b5804fe7549857bde0a9ecd3b393faaaef83e2229b6
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Tuggle Dugginsnorm: tuggle duggins
- Domain
- tuggleduggins.com
- Industry
- professional_services
Incident
- Discovered
- Oct 1, 2024
- Materiality determined
- —
- Notification sent
- Feb 6, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Supplemental Notice of Data Event to New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(493 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.