Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Berry, Dunn, McNeil & Parker, LLC

bd_66e9a9e89429bdc6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 8, 2022

Filed

Sep 22, 2022

To disclose

15 weeks

Affected

55state residents only

Linked

6 filings

Confidence

67%

Full breach record for Berry, Dunn, McNeil & Parker, LLC →3 incidents on file

Berry, Dunn, McNeil & Parker notified the NH AG of a phishing incident where an employee's email account was compromised. Unauthorized access occurred after June 8, 2022. Data potentially exposed included names, SSNs, medical history, and health insurance policy numbers. 55 NH residents were notified on Sept 16, 2022. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 106 days

Jun 8, 2022

Discovered

Sep 22, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_1466fbf7dad97fa32022-09-22Verified
Massachusetts State AGbd_23f4493df32612cc2022-09-22Verified
Maine State AGbd_691dcbf163e4b2b42022-09-22Verified
Maine State AGbd_0d8af214bdf134702022-09-16 · +6dCandidate

Show 1 more filing ↓up to 6d gap

Montana State AGbd_c9addac7547cba502022-09-16 · +6dVerified

Name: Berry, Dunn, McNeil & Parker, LLC
norm: berry dunn mcneil parker

Name: Berry, Dunn, McNeil & Parker, LLC
norm: berry dunn mcneil parker
Industry: Professional Servicesllm

Discovered: Jun 8, 2022
Materiality determined: —
Notification sent: Sep 16, 2022
Affected individuals: 55state-resident count only
Data types: Identity (basic)Government IDHealth (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Isolated the unauthorized access to the email account
Changed the password to the affected email account
Hired external computer forensic specialists
Implemented incident response protocols
Notified clients who had provided data
Arranged for impacted individuals to receive credit monitoring and identity restoration services
Changes made: Offered 24 months of credit monitoring and identity protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGSep 16 · first

Montana State AGSep 16 · first

Indiana State AG+6d

Massachusetts State AG+6d

Maine State AG+6d

New Hampshire State AG+6d · this page

Pattern: first filing Sep 16 (ME), last Sep 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/berry-dunn-mcneil-parker-20220922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2022
Raw hash: ff4ce867742c117dc6d6804e7b782f7668003c62a8512f768f4a3e5c1c1ea86b

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityBerry, Dunn, McNeil & Parker, LLC

Victim entityBerry, Dunn, McNeil & Parker, LLC

Incidentdiscovered Jun 8, 2022

Stated responseIsolated the unauthorized access to the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov