HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Berger Bullets
bd_2f25ed2f609f5beb · schema v1 · pii pii-v1
Full breach record for Berger Bullets →Berger & Williams, LLP, a law firm, notified the New Hampshire Attorney General of unauthorized access to an employee email account affecting approximately 8 NH residents. The breach occurred around February 6, 2025, and was discovered on April 6, 2026. Personal information, including names and Social Security numbers, was accessed. Notifications were sent on May 4, 2026, offering one year of credit monitoring and fraud insurance.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2a73a11d0f8e368cMaine State AGfiled 2026-05-05(3d gap)Verified
- bd_547ff28456c944c0Vermont State AGfiled 2026-05-05(3d gap)Verified
- bd_6cd793416977241bCalifornia State AGfiled 2026-05-05(3d gap)Verified
- bd_581b7b1f8fa3ab2dIndiana State AGfiled 2026-05-04(4d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 7d gap
- bd_0314c0b6acf12407Massachusetts State AGfiled 2026-05-01(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/berger-williams-20260508.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2026
- Raw hash
- 4e701a6a8dc1c505a18c9d8cd8fd4538a876e7fc1d50f43863cff5b35676ef13
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Berger Bulletsnorm: berger bullets
- Domain
- bergerbullets.com
Incident
- Discovered
- Apr 6, 2026
- Materiality determined
- —
- Notification sent
- May 4, 2026
- Affected individuals
- 8
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.