HackingStolen CredentialsMulti-Stage ChainData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowActive
Kiernan Trebach
bd_26cc665cc7425bbf · schema v1 · pii pii-v1
Full breach record for Kiernan Trebach →Kiernan Trebach LLP notified the New Hampshire Attorney General of unauthorized access to its systems occurring between May 2023 and September 2024. The firm discovered suspicious activity on October 21, 2024. Eight New Hampshire residents were affected. The firm notified law enforcement, offered credit monitoring, and is implementing additional safeguards.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_20e2c2f3f38f1343Indiana State AGfiled 2025-05-07Candidate
- bd_7b76d4db13b517c5Maine State AGfiled 2025-05-07Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/kiernan-trebach-20250507.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2025
- Raw hash
- a5c43d5e45b91a26a70562957bced08721bfdb8f3668ca67e82670c9f6e8eafa
Reporting entity
- Name
- Kiernan Trebachnorm: kiernan trebach
- Domain
- kiernantrebach.com
Victim entity
- Name
- Kiernan Trebachnorm: kiernan trebach
- Domain
- kiernantrebach.com
Incident
- Discovered
- Oct 21, 2024
- Materiality determined
- Mar 4, 2025
- Notification sent
- May 7, 2025
- Affected individuals
- 8
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.