Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Leonard Mulherin and Greene, PC
bd_7e6a6b10a693b958 · schema v1 · pii pii-v1
Full breach record for Leonard Mulherin and Greene, PC →Leonard Mulherin and Greene, PC (LMG), an auditing and accounting firm, notified the New Hampshire Attorney General of a data incident discovered on December 2, 2024. An unauthorized actor accessed one of LMG's email accounts via a phishing link, potentially acquiring Social Security Numbers of 43 New Hampshire residents. LMG deactivated the account, engaged forensic investigators, and mailed notification letters on August 13, 2025, offering 12 months of credit monitoring through TransUnion.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_03ac1ac952812a9bMaine State AGfiled 2025-08-13(1d gap)Candidate
- bd_c49a46f152cce928Indiana State AGfiled 2025-08-13(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/leonard-mulherin-greene-20250812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 12, 2025
- Raw hash
- d32384539840601f007f1d4447a38f84d4b3e4db3c6c9632cc71006efbb623a8
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- Leonard Mulherin and Greene, PCnorm: leonard mulherin and greene
Incident
- Discovered
- Dec 2, 2024
- Materiality determined
- —
- Notification sent
- Aug 13, 2025
- Affected individuals
- 43
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General John M. Formella
- Initial access
- phishing_link
Compliance
- Time to disclose
- 36 weeks(253 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.