Deloitte
bd_88bc0706d808c993 · schema v1 · pii pii-v1
Full breach record for Deloitte →4 incidents on fileDeloitte Services LP notified the New Hampshire Attorney General on April 2, 2026, of a social engineering incident affecting one NH resident. On February 13, 2026, an unauthorized actor impersonated an employee via phone to reset credentials and access the employee's personnel account, exposing the employee's name and Social Security number. Deloitte discovered the incident on February 18, 2026, reset credentials, and implemented process changes. The company offered one year of Experian IdentityWorks to the affected individual.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 13, 2026
Begins
Feb 18, 2026
Discovered
Apr 2, 2026
Filed
vs. sector median
13 wks faster
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.