HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Riddle & Butts, LLP

bd_75b9543e653360b6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 7, 2026

Filed

Jun 2, 2026

To disclose

21 weeks

Affected

1state residents only

Linked

8 filings

Confidence

66%

Full breach record for Riddle & Butts, LLP →

Riddle & Butts, LLP notified the New Hampshire Attorney General of a data event affecting one NH resident. An unauthorized actor accessed the network between Dec 30, 2025 and Jan 7, 2026, copying files containing names and Social Security numbers. The firm notified law enforcement, provided 24 months of credit monitoring via Experian, and enhanced security protocols.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

discovery → filing · 21 weeks / 146 days

Dec 30, 2025

Begins

Jan 7, 2026

Discovered

Jun 2, 2026

Filed

vs. sector median

+3 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Nebraska State AGbd_c57042afd58274712026-06-02Verified
Texas State AGbd_fd12b99434464c732026-06-02Verified
Texas State AGbd_674f2dd5cb9770ba2026-03-12 · +82dVerified
Massachusetts State AGbd_8dac90d1f4d868282026-03-10 · +84dCandidate

Show 3 more filings ↓up to 84d gap

Maine State AGbd_e051698dcb32ee0f2026-03-10 · +84dVerified
Indiana State AGbd_f24cf2933591a89f2026-03-10 · +84dVerified
Indiana State AGbd_fe4d83dfbff627bf2026-03-10 · +84dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Riddle & Butts, LLP
norm: riddle butts
Domain: riddlebutts.com
Industry: professional_services
Industry: Professional Servicesllm

Discovered: Jan 7, 2026
Breach occurred: Dec 30, 2025 – Jan 7, 2026
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 2, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
Initial access: exploit_public_facing

During the incident: Launched an investigation to determine the nature and scope of the activity
Undertook a detailed review of all files potentially impacted
Notified federal law enforcement regarding the event
Provided written notice of this incident to one (1) New Hampshire resident
Providing access to credit monitoring services for twenty-four (24) months, through Experian, to individuals whose personal information was potentially affected
Changes made: Working to implement additional safeguards and training to its employees
Enhanced its existing security protocols
Continues to evaluate its policies and procedures related to data privacy and security
Inactive client data has been moved to an isolated, highly protected storage system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(146 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 6 states

View merged incident ↗

Massachusetts State AGMar 10 · first

Maine State AGMar 10 · first

Indiana State AGMar 10 · first

Texas State AG+2d

Nebraska State AG+84d

Texas State AG+84d

New Hampshire State AG+84d · this page

Pattern: first filing Mar 10 (MA), last Jun 2 (NH) — a 84-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/riddle-butts-20260602.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2026
Raw hash: c1bbdf58136527f6b92d4b4b242353386306935a72c63bc21114e8db819ab1ca

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityRiddle & Butts, LLP

Incidentdiscovered Jan 7, 2026

Stated responseLaunched an investigation to determine the nature and scope of the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov