HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

O'Brien & Ryan, LLP,

bd_8f055e97629ad148 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 8, 2025

Filed

Sep 10, 2025

To disclose

22 weeks

Affected

3state residents only

Linked

4 filings

Confidence

69%

Full breach record for O'Brien & Ryan, LLP, →

O'Brien & Ryan, LLP, a law firm, notified the New Hampshire Attorney General on September 10, 2025, of a data event affecting 3 New Hampshire residents. On April 8, 2025, unauthorized actors accessed and copied files containing names, SSNs, driver's licenses, medical/health insurance info, and financial account data. The firm engaged outside cybersecurity specialists, notified federal law enforcement, and provided 12 months of credit monitoring via TransUnion/Cyberscout.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d22 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 22 weeks / 155 days

Apr 8, 2025

Begins

Apr 8, 2025

Discovered

Sep 10, 2025

Filed

vs. sector median

+3 wks slower

This filing is one of 4 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 167 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_bc72df47df88bedd2025-03-27 · +167dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_c670b2d979af23a52025-09-10Verified by operator
Indiana State AGbd_4d4146f07e9c88a42025-09-09 · +1dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: O'Brien & Ryan, LLP,
norm: o brien ryan
Domain: obrlaw.com
Industry: Professional Servicesllm

Discovered: Apr 8, 2025
Breach occurred: Apr 8, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 9, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Launched a response with assistance from outside cybersecurity specialists
Secured the network
Notified federal law enforcement
Provided access to credit monitoring services for twelve (12) months, through TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Review and further enhance these protections
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(155 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGSep 9 · first

Massachusetts State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/obrien-ryan-20250910.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 10, 2025
Raw hash: f70530056c982ba7d44e0a74dbc230edd9dd1926b3edd3f55b92b34853cb5874

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityO'Brien & Ryan, LLP,

Incidentdiscovered Apr 8, 2025

Stated responseLaunched a response with assistance from outside cybersecurity specialists

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov