Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICPIILowContained
NH Legal Assistance
bd_45f5ec24dba34dff · schema v1 · pii pii-v1
Full breach record for NH Legal Assistance →New Hampshire Legal Assistance (NHLA) notified 30 New Hampshire residents of a data security event. On September 9, 2024, NHLA detected unauthorized access to an employee email account, likely via phishing. The investigation confirmed an unauthorized actor accessed the account, potentially exposing personal information including names and addresses. NHLA engaged third-party cybersecurity specialists, implemented additional employee safeguards and training, and offered complimentary identity monitoring services to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_eff2aa2aa3f732a8Vermont State AGfiled 2025-02-06Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-hampshire-legal-assistance-20250206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2025
- Raw hash
- a41f37ee1fcc264577181a07dfb2729f9412d388ff8d6445b716dd8589ac72d3
Reporting entity
- Name
- NH Legal Assistancenorm: nh legal assistance
- Domain
- nhla.org
Victim entity
- Name
- NH Legal Assistancenorm: nh legal assistance
- Domain
- nhla.org
Incident
- Discovered
- Sep 9, 2024
- Materiality determined
- Dec 23, 2024
- Notification sent
- Feb 6, 2025
- Affected individuals
- 30
- Data types
- IDENTITY_BASICPII
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Providing written notice of this event to relevant state regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.