HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)FinancialLowContained

Kaufman Borgeest & Ryan LLP

bd_2b67083dcee2e04c · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 21, 2023

To disclose

—

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Kaufman Borgeest & Ryan LLP →

Kaufman Borgeest & Ryan LLP notified the NH Attorney General of a security incident involving one New Hampshire resident. Unauthorized actors accessed internal accounting files on November 4, 2023. The firm engaged a cybersecurity firm, contained the activity, and notified law enforcement. The affected individual was offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Nov 4, 2023

Begins

Dec 21, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_ff006ed8c2ca80482023-11-06 · +45dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_20b1efa2312e70552023-12-21Verified
Vermont State AGbd_a0f1c51b82b8ed682023-12-21Verified
Maine State AGbd_ec57989a365085262023-12-21Candidate

Name: Kaufman Borgeest & Ryan LLP
norm: kaufman borgeest ryan
Domain: kbrlaw.com

Name: Kaufman Borgeest & Ryan LLP
norm: kaufman borgeest ryan
Domain: kbrlaw.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Nov 4, 2023
Materiality determined: —
Notification sent: Dec 21, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Financial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, NH

During the incident: Implemented its incident response plan
Took measures to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Communicated with law enforcement and is supporting its investigation
Offering the resident a complimentary, one-year membership to credit monitoring and identity theft protection services
Established a dedicated, toll-free call center
Changes made: Taken steps to further enhance our security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGDec 21 · first

Vermont State AGDec 21 · first

Maine State AGDec 21 · first

New Hampshire State AGDec 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kaufman-borgeest-ryan-20231221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2023
Raw hash: 7e14381706d6a75d968d12e966095e0f38acaafe3d5a5256c88b037cce04265a

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityKaufman Borgeest & Ryan LLP

Victim entityKaufman Borgeest & Ryan LLP

IncidentUnauthorized Access

Stated responseImplemented its incident response plan

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov