HackingPIIIDENTITY_GOVERNMENTMediumActive
Mercadien PC Certified Public Accountants
bd_6a472f77725ed762 · schema v1 · pii pii-v1
Full breach record for Mercadien PC Certified Public Accountants →Mercadien PC, a CPA firm, notified the New Hampshire Department of Justice of a data security incident discovered on November 7, 2025. Unauthorized access occurred between September 17 and October 9, 2025. The investigation is ongoing, and the number of affected individuals is currently unknown. Law enforcement was notified, and forensic experts are engaged. Remediation includes password resets and deploying SentinelOne.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_be4f63906a17f728Maine State AGfiled 2025-12-31(5d gap)Candidate
- bd_5a136d8dad7a1346Indiana State AGfiled 2026-02-17(43d gap)Verified
- bd_b06b2f75cc90e445Delaware State AGfiled 2026-02-17(43d gap)Verified
- bd_bb8b76494cae40c6South Carolina State AGfiled 2026-02-23(49d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 50d gap
- bd_7b787e3dbbd82d8eTexas State AGfiled 2026-02-24(50d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mercadien-certified-public-accountants-20260105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 5, 2026
- Raw hash
- 1bfd3834caae3f4128f3835bbbf38e042e5a59e8e35748d994ad721a5a5ed7bf
Reporting entity
- Name
- Pierson Ferdinand LLPnorm: pierson ferdinand
- Domain
- pierferd.com
Victim entity
- Name
- Mercadien PC Certified Public Accountantsnorm: mercadien pc certified public accountants
Incident
- Discovered
- Nov 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 3, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- reported the Incident to law enforcement
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.