HackingSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIIDENTITY_BASICLowContained
Sewell & Neal PLLC
bd_61793d8f5733fd44 · schema v1 · pii pii-v1
Full breach record for Sewell & Neal PLLC →McNeill Baur PLLC reported a third-party data security incident involving its payroll vendor, Paycor. Paycor experienced a breach via the MOVEit software vulnerability, resulting in the unauthorized download of files containing personal information for some current and former employees on or around May 31, 2023. McNeill Baur learned of the incident on November 30, 2023. One New Hampshire resident was notified. McNeill Baur partnered with Experian to provide complimentary identity monitoring and credit monitoring services to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mcneill-baur-20240206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2024
- Raw hash
- 844bbf76b518144b0cd125746fa60d1fcada8807a12e5423d8d31e5074b9900a
Reporting entity
- Name
- Sewell & Neal PLLCnorm: sewell neal
- Domain
- mcneillbaur.com
Victim entity
- Name
- Sewell & Neal PLLCnorm: sewell neal
- Domain
- mcneillbaur.com
Incident
- Discovered
- Nov 30, 2023
- Materiality determined
- —
- Notification sent
- Dec 22, 2023
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John M. Formella
- Third party
- via Paycor
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.