HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Langer & Langer

bd_50b201b2bbacd01e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 11, 2025

Filed

Feb 2, 2026

To disclose

21 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Langer & Langer →

Langer & Langer P.C. notified the New Hampshire Attorney General of unauthorized network access affecting one NH resident. The actor accessed and removed files containing the resident's full name and Social Security number. Langer engaged outside cybersecurity professionals, conducted forensic and manual document reviews, and is providing one year of complimentary credit monitoring and fraud alerts to the affected individual. Notification letters began on January 28, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d21 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 21 weeks / 144 days

Sep 11, 2025

Discovered

Feb 2, 2026

Filed

vs. sector median

+2 wks slower

This filing is one of 3 about the same incident.View merged incident

A leak claim by silentransomgroup about this victim predates this filing by 334 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesilentransomgroupbd_57f8fc4b79f079c72025-03-05 · +334dCandidate

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_0c71ba10943002932026-01-28 · +5dVerified by operator

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Langer & Langer
norm: langer langer
Domain: langer-langer.de
Industry: professional_services
Industry: Professional Servicesllm

Discovered: Sep 11, 2025
Materiality determined: —
Notification sent: Jan 28, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Conducted a thorough and detailed forensic investigation
Conducted a thorough and detailed manual document review
Located the most recent mailing address for the impacted New Hampshire resident
Providing the affected resident with written notification
Advising the affected resident about the process for placing fraud alerts and/or security freezes on their credit files and obtaining free credit reports
Offering complimentary credit monitoring for one year
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(144 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJan 28 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jan 28 (IN), last Feb 2 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/langer-langer-20260202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2026
Raw hash: 138fcc127ea8d0abf2af31a032f42a44d8b85e4b63eed792dc9de0105f7108b3

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityLanger & Langer

Incidentdiscovered Sep 11, 2025

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov