HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Black, Bashor & Porsch, LLP

bd_119632f74de1c6b5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 11, 2024

Filed

Jan 24, 2025

To disclose

6 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Black, Bashor & Porsch, LLP →2 incidents on file

Black, Bashor & Porsch, LLP notified the New Hampshire Attorney General of a data security incident discovered on December 11, 2024. An unauthorized actor acquired files containing personal information of one New Hampshire resident. The firm engaged cybersecurity experts, secured its network, and offered identity theft protection services to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 44 days

Dec 11, 2024

Discovered

Jan 9, 2025

Scope determined

Jan 24, 2025

Filed

vs. sector median

11 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_aff43ae7304290912025-01-14 · +9dVerified by operator

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_e2cde23331696fd82025-01-24Candidate

Name: Black, Bashor & Porsch, LLP
norm: black bashor porsch
Domain: bbpcpa.com

Name: Black, Bashor & Porsch, LLP
norm: black bashor porsch
Domain: bbpcpa.com
Industry: Professional Servicesllm

Discovered: Dec 11, 2024
Materiality determined: Jan 9, 2025
Notification sent: Jan 24, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John M. Formella
Initial access: valid_credentials

During the incident: Took steps to secure the network
Launched an investigation, aided by independent cybersecurity experts
Implemented additional security measures
Offered notified individuals complimentary services through Identity Defense Complete
Changes made: Implemented additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(44 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJan 24 · first

New Hampshire State AGJan 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/black-bashor-porsch-20250124.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 24, 2025
Raw hash: 329636038347672891fff976ac0250251d8778f5f58f357714048205b719c31e

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityBlack, Bashor & Porsch, LLP

Victim entityBlack, Bashor & Porsch, LLP

Incidentdiscovered Dec 11, 2024

Stated responseTook steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov