HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained

Montagut & Sobral, PC

bd_2eac6b662cc6c07d · schema v1 · pii pii-v1

Full breach record for Montagut & Sobral, PC →

Montagut & Sobral, PC notified the NH Attorney General of a data breach detected on June 24, 2024. An unauthorized party copied personal information of approximately 3 NH residents. Data included names, DOB, phone, address, email, driver's license, passport, SSN, and financial info. The firm engaged cybersecurity experts, contacted law enforcement, enhanced security controls, and offered credit monitoring.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_88943a40d4e1db58Indiana State AGfiled 2024-09-19(19d gap)Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/montagut-sobral-20241008.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 8, 2024
Raw hash: 7a4917ebd06b059d93de7435661bb44f8089387d9741e19e91121d7e147619f8

Reporting entity

Name: Montagut & Sobral, PC
norm: montagut sobral
Domain: montagutsobral.com

Victim entity

Name: Montagut & Sobral, PC
norm: montagut sobral
Domain: montagutsobral.com

Incident

Discovered: Jun 24, 2024
Materiality determined: —
Notification sent: Sep 19, 2024
Affected individuals: 3
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Consumer Protection Bureau, Office of the Attorney General
Initial access: valid_credentials

Compliance

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.