Complete Payroll Solutions
bd_5fdc02e392c3d7f2 · schema v1 · pii pii-v1
Full breach record for Complete Payroll Solutions →Complete Payroll Solutions, LLC (CPS) filed a supplemental notice with the New Hampshire Attorney General on May 28, 2025, regarding an unauthorized access incident discovered on or around March 10, 2024. The breach affected an additional 60 New Hampshire residents, bringing the total notified in this supplemental filing to 60 (previous filings covered 21,973 NH residents). The unauthorized individual accessed personal information including names and government identifiers. CPS notified law enforcement, reset passwords, implemented additional security safeguards, and provided complimentary identity monitoring through Kroll.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_b49242977c3bd20eIndiana State AGfiled 2025-04-25(33d gap)Verified
- bd_c06fe742fa395840New Hampshire State AGfiled 2025-04-25(33d gap)Verified
- bd_f99beb53f694daceVermont State AGfiled 2025-04-25(33d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/complete-payroll-solutions-20250528.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2025
- Raw hash
- f1947907924d8d92c1d0729be121ff8a40b51d6ba6c740e475a8a86749e7a3aa
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Complete Payroll Solutionsnorm: complete payroll
- Domain
- completepayrollsolutions.com
Incident
- Discovered
- Mar 10, 2024
- Materiality determined
- —
- Notification sent
- May 28, 2025
- Affected individuals
- 60
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Provided written notice of this incident to relevant state regulators, as necessary
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(444 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.