Social EngineeringPhishingStolen CredentialsTargetedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Knox McLaughlin Gornall & Sennett PC
bd_2d23f22a176fe23c · schema v1 · pii pii-v1
Full breach record for Knox McLaughlin Gornall & Sennett PC →Knox McLaughlin Gornall Sennett, P.C. notified the NH Attorney General of a data security event affecting one NH resident. Unauthorized access to an employee email account occurred on May 14, 2025, discovered May 29, 2025. Names and SSNs were potentially accessed. The firm engaged forensic experts, reset passwords, notified the FBI, and provided 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_d1c1c06c6d048481Montana State AGfiled 2025-10-08Verified by operator
- bd_7d8ac106361b59deVermont State AGfiled 2025-10-07(1d gap)Verified
- bd_9dba301b3923e666Maine State AGfiled 2025-10-07(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/knox-mclaughlin-gornall-sennett-20251008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2025
- Raw hash
- 9c9465d0375f9c0a04b8dfab41b0d26f210823d9779db20f871dabcec8fee4e4
Reporting entity
- Name
- Knox McLaughlin Gornall & Sennett PCnorm: knox mclaughlin gornall sennett
Victim entity
- Name
- Knox McLaughlin Gornall & Sennett PCnorm: knox mclaughlin gornall sennett
Incident
- Discovered
- May 29, 2025
- Materiality determined
- —
- Notification sent
- Oct 7, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 weeks(132 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.