DisclosureLens
HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Brennan Recupero Cascione Scungio and McAllister LLP

bd_8a4d17dab6d159b2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 15, 2016

Filed

Nov 22, 2016

To disclose

14 weeks

Affected

11state residents only

Linked

3 filings

Confidence

66%
Full breach record for Brennan Recupero Cascione Scungio and McAllister LLP

Brennan Recupero Cione Sculio and McAllister LLP notified the NH Attorney General that an unauthorized individual used stolen credentials to access their network on August 15, 2016. The incident potentially affected 11 New Hampshire residents, exposing names, SSNs, dates of birth, addresses, and bank account information. The firm reset passwords, engaged forensic experts, and offered 12 months of credit monitoring. The investigation was ongoing at the time of notification.

Incident timeline

discovery → filing · 14 weeks / 99 days

Aug 15, 2016

Begins

Aug 15, 2016

Discovered

Nov 22, 2016

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 2 states

View merged incident ↗
Massachusetts State AGNov 22 · first
New Hampshire State AGNov 22 · first · this page

Pattern: first filing Nov 22 (MA), last Dec 5 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.