HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHIMediumContained
Easterseals UCP North Carolina & Virginia, Inc.
bd_20e5090eee758aca · schema v1 · pii pii-v1
Full breach record for Easterseals UCP North Carolina & Virginia, Inc. →Langdon & Co. CPA LLP, a third-party service provider to Easterseals UCP North Carolina & Virginia, Inc., reported unauthorized access to its network between April 21-28, 2024. The incident affected 5 New Hampshire residents, exposing names, SSNs, dates of birth, and medical/health insurance information. Langdon engaged forensic specialists, notified law enforcement, reset passwords, implemented MFA, and provided 12 months of identity monitoring to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/langdon-cpa-20250821.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 21, 2025
- Raw hash
- df1ef200233e3180658c3341d6e20cee1d3565372954e9d940667e9059f49422
Reporting entity
- Name
- Nelson & Townsend, CPA'snorm: nelson townsend cpa s
- Domain
- nelsonandtownsend.com
Victim entity
- Name
- Easterseals UCP North Carolina & Virginia, Inc.norm: easterseals ucp north carolina virginia
Incident
- Discovered
- Apr 28, 2024
- Materiality determined
- —
- Notification sent
- Aug 20, 2025
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire State Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 months(480 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.