HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Barucci Consulting Services

bd_1650f763760d1d7e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 10, 2025

Filed

Dec 12, 2025

To disclose

13 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Barucci Consulting Services →2 incidents on file

Barucci Consulting Services dba Padgett Advisors of Westwood reported a data security incident to the New Hampshire Attorney General. The incident involved unauthorized access to a single user's device between August 12, 2025, and September 10, 2025. The breach potentially exposed the names, dates of birth, and Social Security numbers of one New Hampshire resident. The company engaged forensic experts, notified law enforcement, and provided 12 months of complimentary credit monitoring and identity theft protection services to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 29 days

discovery → filing · 13 weeks / 93 days

Aug 12, 2025

Begins

Sep 10, 2025

Discovered

Dec 12, 2025

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Barucci Consulting Services
norm: barucci consulting

Name: Barucci Consulting Services
norm: barucci consulting
Also named: Barucci Consulting Servicesdba oflegal entity
Padgett Advisors of Westwooddba oftrade name
Industry: Professional Servicesllm

Discovered: Sep 10, 2025
Breach occurred: Aug 12, 2025 – Sep 10, 2025
Undetected for: 29 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 18, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: reported the Incident to law enforcement
Initial access: external_remote_services

During the incident: Reported the Incident to law enforcement
Worked with cybersecurity counsel and forensic experts to investigate
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Took steps to mitigate the potential impact to our community
Changes made: Obtaining a new Electronic Filing Identification Number number with the IRS
Evaluating opportunities to further secure our systems to prevent a similar event from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(93 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/barucci-consulting-padgett-advisors-westwood-20251212.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2025
Raw hash: 71491cabab18a6db7a3e8f420f20a652094b5d37e60a1238c7d1ac559d4c86b8

Reporting entityBarucci Consulting Services

Victim entityBarucci Consulting Services

Incidentdiscovered Sep 10, 2025

Stated responseReported the Incident to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov