HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Charlie Condon Law Firm, LLC

bd_38760c1950e1f85c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 6, 2025

Filed

May 15, 2026

To disclose

32 weeks

Affected

5state residents only

Linked

5 filings

Confidence

67%

Full breach record for Charlie Condon Law Firm, LLC →

Charlie Condon Law Firm, LLC, a South Carolina law firm, notified the New Hampshire Attorney General of a data incident affecting 5 NH residents. On October 6, 2025, unusual activity was detected; files were accessed without authorization. Data involved names, SSNs, and driver's license numbers. The firm engaged cybersecurity experts, conducted a review, and provided complimentary identity protection services to affected residents.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 32 weeks / 221 days

Oct 6, 2025

Discovered

May 15, 2026

Filed

vs. sector median

+14 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

South Carolina State AGbd_e493b4c1e016f09c2026-05-15Verified
Maine State AGbd_1737eb6462aa847e2026-05-09 · +6dVerified by operator
Massachusetts State AGbd_78981195c0e055d52026-05-09 · +6dCandidate
Indiana State AGbd_2aaa95f9d47421122026-05-08 · +7dVerified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Charlie Condon Law Firm, LLC
norm: charlie condon law firm
Industry: professional_services
Industry: Professional Servicesllm

Discovered: Oct 6, 2025
Materiality determined: —
Notification sent: May 8, 2026
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: submitted notice to New Hampshire Attorney General's Consumer Protection Bureau

During the incident: Initiated an investigation with the assistance of cybersecurity experts
Conducted a thorough review of the affected information
Engaged a consumer remediation firm
Worked to notify individuals as soon as possible
Arranged to provide New Hampshire residents whose Social Security numbers may have been involved with complimentary identity protection services
Changes made: Implemented additional measures to further harden our environment and reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(221 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMay 8 · first

Maine State AG+1d

Massachusetts State AG+1d

South Carolina State AG+7d

New Hampshire State AG+7d · this page

Pattern: first filing May 8 (IN), last May 15 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/charlie-condon-law-firm-20260515.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 15, 2026
Raw hash: 2c49e3153e249fc32055006b64aab7aa3fde329461f3f39b3e3f3ea082f52de6

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityCharlie Condon Law Firm, LLC

Incidentdiscovered Oct 6, 2025

Stated responseInitiated an investigation with the assistance of cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov