HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Scott & Kraus, LLC
bd_17d9abb1684f6bc2 · schema v1 · pii pii-v1
Full breach record for Scott & Kraus, LLC →Scott & Kraus, LLC notified the New Hampshire Attorney General of a data security incident occurring on February 27, 2025. An unknown actor gained unauthorized access to the network, potentially exfiltrating names, driver's license numbers, state ID numbers, and taxpayer identification numbers. Two New Hampshire residents were affected. Notifications were sent on December 22, 2025, offering 12 months of credit monitoring and identity protection services. The incident is currently contained.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8218a01bb4c05dccIndiana State AGfiled 2025-12-22Candidate
- bd_ba5d302e7bd9bcd2Maine State AGfiled 2025-12-22Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/scott-kraus-20251222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2025
- Raw hash
- 1d6365dadaf1a45930878006f1d3572636c81d8130a99f7a463600d73b13edaa
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- Scott & Kraus, LLCnorm: scott kraus
Incident
- Discovered
- Feb 27, 2025
- Materiality determined
- —
- Notification sent
- Dec 22, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 43 weeks(298 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.