HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Scott & Kraus, LLC

bd_17d9abb1684f6bc2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2025

Filed

Dec 22, 2025

To disclose

43 weeks

Affected

2state residents only

Linked

6 filings

Confidence

66%

Full breach record for Scott & Kraus, LLC →

Scott & Kraus, LLC notified the NH Attorney General that an unknown actor gained unauthorized access to its network on February 27, 2025, potentially acquiring files containing personal information of 2 New Hampshire residents. The data may have included names, driver's license/state ID numbers, and taxpayer identification numbers. The incident was contained, and the firm engaged forensic experts. Affected individuals were notified via mail on December 22, 2025, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d43 weeks discovery → filing

Incident timeline

discovery → filing · 43 weeks / 298 days

Feb 27, 2025

Begins

Feb 27, 2025

Discovered

Dec 22, 2025

Filed

vs. sector median

+25 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by kraken about this victim predates this filing by 307 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitekrakenbd_b375be346cf01bcf2025-02-18 · +307dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_8218a01bb4c05dcc2025-12-22Verified
Maine State AGbd_ba5d302e7bd9bcd22025-12-22Verified
Massachusetts State AGbd_74debd7e4e5bbc4f2025-12-23 · +1dVerified
Illinois State AGbd_6baebbfa45ccfdc82025-12-01 · +21dCandidate

Name: Scott & Kraus, LLC
norm: scott kraus

Name: Scott & Kraus, LLC
norm: scott kraus
Domain: skcounsel.com
Industry: Professional Servicesllm

Discovered: Feb 27, 2025
Breach occurred: Feb 27, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 22, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Retained cybersecurity experts and launched a forensics investigation to determine the source and scope of the compromise
Implemented additional security measures to further harden its environment
Notifying the affected individuals
Offering affected individuals complimentary credit monitoring and identity protection services through IDX
Changes made: Implemented additional security measures to further harden its environment in an effort to prevent a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 43 weeks(298 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGDec 1 · first

Indiana State AG+21d

Maine State AG+21d

New Hampshire State AG+21d · this page

Massachusetts State AG+22d

Pattern: first filing Dec 1 (IL), last Dec 23 (MA) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/scott-kraus-20251222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2025
Raw hash: 1d6365dadaf1a45930878006f1d3572636c81d8130a99f7a463600d73b13edaa

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityScott & Kraus, LLC

Victim entityScott & Kraus, LLC

Incidentdiscovered Feb 27, 2025

Stated responseRetained cybersecurity experts and launched a forensics investigation to determine the source and scope of the compromise

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov