HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedGovernment IDMediumContained

Leonard Mulherin and Greene, PC

bd_7e6a6b10a693b958 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 2, 2024

Filed

Aug 12, 2025

To disclose

36 weeks

Affected

43state residents only

Linked

5 filings

Confidence

67%

Full breach record for Leonard Mulherin and Greene, PC →

Leonard Mulherin and Greene, PC, an auditing, accounting, and tax services provider, detected unusual activity in an email account on December 2, 2024. An unauthorized actor potentially accessed and acquired information, including Social Security Numbers. The firm engaged internal IT and third-party forensics to investigate. 43 New Hampshire residents were notified on August 13, 2025, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 36 weeks / 253 days

Dec 2, 2024

Discovered

Aug 12, 2025

Filed

vs. sector median

+17 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_03ac1ac952812a9b2025-08-13 · +1dCandidate
Massachusetts State AGbd_1ff38c2307091fc02025-08-13 · +1dVerified
Indiana State AGbd_c49a46f152cce9282025-08-13 · +1dVerified
Nebraska State AGbd_d80a406e76254c432025-08-13 · +1dVerified

Name: Leonard Mulherin and Greene, PC
norm: leonard mulherin and greene
Domain: wilsonelser.com

Name: Leonard Mulherin and Greene, PC
norm: leonard mulherin and greene
Industry: Professional Servicesllm

Discovered: Dec 2, 2024
Materiality determined: —
Notification sent: Aug 13, 2025
Affected individuals: 43state-resident count only
Data types: Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1114 Email Collection
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Contacted their internal Information Technology (IT) consulting firm confirm the security of their systems and deactivate the affected email account
Internally investigated to determine the nature and scope of the incident
Engaged and worked with a specialized third-party data forensics and cybersecurity firm to conduct a comprehensive review of the email account, including data mining
Offered twelve (12) months of complimentary credit monitoring and identity theft restoration services through TransUnion
Changes made: Taken steps to strengthen its existing security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 36 weeks(253 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGAug 12 · first · this page

Maine State AG+1d

Massachusetts State AG+1d

Indiana State AG+1d

Nebraska State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/leonard-mulherin-greene-20250812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2025
Raw hash: d32384539840601f007f1d4447a38f84d4b3e4db3c6c9632cc71006efbb623a8

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityLeonard Mulherin and Greene, PC

Victim entityLeonard Mulherin and Greene, PC

Incidentdiscovered Dec 2, 2024

Stated responseContacted their internal Information Technology (IT) consulting firm confirm the security of their systems and deactivate the affected email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov