HackingStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Kaufman Borgeest & Ryan LLP
bd_2b67083dcee2e04c · schema v1 · pii pii-v1
Full breach record for Kaufman Borgeest & Ryan LLP →Kaufman Borgeest & Ryan LLP notified the NH Attorney General of a security incident on Nov 4, 2023, where unauthorized actors accessed internal accounting files containing one NH resident's PII. The firm engaged a cybersecurity firm, contained the breach, and offered one year of credit monitoring.
Leak gap clock⏱ Leak >30d7 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 45 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a0f1c51b82b8ed68Vermont State AGfiled 2023-12-21Verified
- bd_ec57989a36508526Maine State AGfiled 2023-12-21Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/kaufman-borgeest-ryan-20231221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2023
- Raw hash
- 7e14381706d6a75d968d12e966095e0f38acaafe3d5a5256c88b037cce04265a
Reporting entity
- Name
- Kaufman Borgeest & Ryan LLPnorm: kaufman borgeest ryan
- Domain
- kbrlaw.com
Victim entity
- Name
- Kaufman Borgeest & Ryan LLPnorm: kaufman borgeest ryan
- Domain
- kbrlaw.com
Incident
- Discovered
- Nov 4, 2023
- Materiality determined
- Dec 1, 2023
- Notification sent
- Dec 21, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.