HackingCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Compex Legal Services
bd_44d07e8c9a641b25 · schema v1 · pii pii-v1
Full breach record for Compex Legal Services →Compex Legal Services Inc. reported unauthorized network access beginning April 9, 2024, discovered on April 17, 2024. The incident affected personal information of New Hampshire residents, including names and government IDs. Compex engaged third-party cybersecurity specialists, notified law enforcement, and offered credit monitoring services to affected individuals.
Leak gap clock⏱ Leak >90d19 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 117 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_215bae1b475ad8f0Montana State AGfiled 2024-08-30Candidate
- bd_4a485590bcf115c8Indiana State AGfiled 2024-08-30Verified
- bd_ebffda3658d7b56bMaine State AGfiled 2024-08-30Verified by operator
- bd_8c8739eab8d7c9d4Oregon State AGfiled 2024-09-20(21d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/compex-legal-services-20240830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 30, 2024
- Raw hash
- 93b9ef306be4644863e5b2ca638b14a00746aedf3407558b55feaff9766e740e
Reporting entity
- Name
- Compex Legal Servicesnorm: compex legal
- Domain
- compexlegal.com
Victim entity
- Name
- Compex Legal Servicesnorm: compex legal
- Domain
- compexlegal.com
Incident
- Discovered
- Apr 17, 2024
- Materiality determined
- Aug 15, 2024
- Notification sent
- Aug 30, 2024
- Affected individuals
- 6
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementProvided written notice to state regulators
Compliance
- Time to disclose
- 19 weeks(135 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.