HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Legacy Professionals, LLP
bd_2b2c9c813c33d341 · schema v1 · pii pii-v1
Full breach record for Legacy Professionals, LLP →Legacy Professionals, LLP, an accounting firm, disclosed a data breach affecting 94 New Hampshire residents. The firm detected suspicious activity in late April 2024, leading to the discovery that an unauthorized actor exfiltrated files from its servers. The firm terminated access, notified federal law enforcement, and provided 24 months of credit monitoring to affected individuals. Notices were sent in late February 2025.
Leak gap clock✗ Leak >180d48 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 301 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_668ab37ff5d363e4California State AGfiled 2025-02-28Candidate
- bd_e36cc97a1f40851dMaryland State AGfiled 2025-02-28Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/legacy-professionals-20250228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- b502664baf5acab72e229567c3ca66daccbe191d6943ea55ec8af507c5ab9426
Reporting entity
- Name
- Legacy Professionals, LLPnorm: legacy professionals
- Domain
- legacycpas.com
Victim entity
- Name
- Legacy Professionals, LLPnorm: legacy professionals
- Domain
- legacycpas.com
Incident
- Discovered
- Apr 1, 2024
- Materiality determined
- Jan 31, 2025
- Notification sent
- Feb 27, 2025
- Affected individuals
- 94
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement regarding the eventProvided written notice of this incident to relevant state and federal regulatorsProvided written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Compliance
- Time to disclose
- 48 weeks(333 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.