HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Thompson & Horton LLP
bd_68dca34fb6031c4d · schema v1 · pii pii-v1
Full breach record for Thompson & Horton LLP →Thompson & Horton, LLP notified the New Hampshire Attorney General of a data breach affecting 4 state residents. Unauthorized access to an MSP-hosted server occurred between April 13 and May 3, 2024, discovered on May 3, 2024. Compromised data included names and SSNs. Notices were sent on October 29, 2025, offering credit monitoring.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_62dd0345ed0ce465Montana State AGfiled 2025-10-29Candidate
- bd_b344e037d355f1a0Indiana State AGfiled 2025-10-29Verified
- bd_ca2da2865ef941c2Vermont State AGfiled 2025-10-29Verified
- bd_2460f839b22fc504Maine State AGfiled 2025-10-30(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_71c2bdcabc3a48a7Texas State AGfiled 2025-10-30(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/thompson-horton-20251029.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2025
- Raw hash
- 2f04a543ea698272b3cd69f75d7a91d7899914495720baa2b24542d4b1870ea8
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- Thompson & Horton LLPnorm: thompson horton
Incident
- Discovered
- May 3, 2024
- Materiality determined
- —
- Notification sent
- Oct 29, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General, Consumer Protection Bureau
- Third party
- via All Covered
- Initial access
- supply_chain
Compliance
- Time to disclose
- 18 months(544 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.