HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedIdentity (basic)Government IDFinancial accountMediumContained

Bomberg, Roach & Hanson, PLLC

bd_51d9172fafece7ab · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 13, 2016

Filed

Dec 16, 2016

To disclose

13 weeks

Affected

5state residents only

Linked

3 filings

Confidence

66%

Full breach record for Bomberg, Roach & Hanson, PLLC →

Bomberg, Roach & Hanson, PLLC (BRH), an accounting firm, notified the NH Attorney General of a data security incident discovered on September 13, 2016. An unauthorized individual accessed BRH's electronic file storage system, potentially exposing client names, addresses, DOBs, SSNs, and financial account info. 5 NH residents were affected. Notices were mailed December 16, 2016. BRH engaged law enforcement, contacted the IRS, and offered 1 year of credit monitoring/identity theft protection. Remediation included stronger passwords, 2FA, encrypted email, and server monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 94 days

Sep 13, 2016

Discovered

Dec 16, 2016

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_4aae964087c3b76e2016-12-16Verified
Montana State AGbd_de5b684c469e919a2016-12-16Candidate

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Bomberg, Roach & Hanson, PLLC
norm: bomberg roach hanson
Industry: Professional Servicesllm

Discovered: Sep 13, 2016
Materiality determined: —
Notification sent: Dec 16, 2016
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcementContacted the Internal Revenue Service (IRS)
Initial access: valid_credentials

During the incident: Took action to secure its system
Notified law enforcement
Conducted an investigation
Contacted the Internal Revenue Service (IRS)
Offering potentially impacted individuals credit monitoring and identity theft protection services for one year, at no cost to the individual, through ID Experts
Changes made: Requiring more complex user passwords
Two factor authentication for remote logins
Encrypted email protection
Server monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(94 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGDec 16 · first

Montana State AGDec 16 · first

New Hampshire State AGDec 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bromberg-roach-hanson.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 16, 2016
Raw hash: 01677e404b816f49934f93664cbe7e56a8dfdf7bb25c4a97d3dacf31d5ee38d9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityBomberg, Roach & Hanson, PLLC

Incidentdiscovered Sep 13, 2016

Stated responseTook action to secure its system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov