Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)MediumContained

McDermott + Bull

bd_34948d0a065ec4cc · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 18, 2025

Filed

Jun 27, 2025

To disclose

6 weeks

Affected

1state residents only

Confidence

66%

McDermott + Bull notified the NH Attorney General of a cyber incident discovered on May 18, 2025, involving unauthorized access to an employee email account. The incident likely exposed one NH resident's name and SSN. MB engaged third-party specialists, secured its network, and sent notices offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

May 18, 2025

Discovered

Jun 17, 2025

Scope determined

Jun 27, 2025

Filed

vs. sector median

13 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: McDermott + Bull
norm: mcdermott + bull
Domain: mcdermott.com

Name: McDermott + Bull
norm: mcdermott + bull
Domain: mcdermott.com
Industry: Professional Servicesllm

Discovered: May 18, 2025
Materiality determined: Jun 17, 2025
Notification sent: Jun 26, 2025
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Took swift action to secure its email system and network
Began working with third-party computer specialists to investigate the full nature and scope of the incident
Began a comprehensive review of the affected files
Sent written notice of this incident to the potentially impacted New Hampshire resident
Offer of complimentary credit monitoring and identity theft protection services for twelve (12) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mcdermott-bull-20250627.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 27, 2025
Raw hash: 79f69f2d0a9fed2748678c9e1ccf02d0cd6e9d8f3d9b593e62b09c96e762b83c

Reporting entityMcDermott + Bull

Victim entityMcDermott + Bull

Incidentdiscovered May 18, 2025

Stated responseTook swift action to secure its email system and network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov