HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
O'Brien & Ryan, LLP,
bd_8f055e97629ad148 · schema v1 · pii pii-v1
Full breach record for O'Brien & Ryan, LLP, →O'Brien & Ryan, LLP, a law firm, notified the New Hampshire Attorney General on September 10, 2025, of a data event affecting 3 state residents. The firm became aware of unauthorized access and copying of files containing names and Social Security numbers on April 8, 2025. The firm engaged outside cybersecurity specialists, notified federal law enforcement, and provided 12 months of credit monitoring to affected individuals.
Leak gap clock⏱ Leak >90d22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 167 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_4d4146f07e9c88a4Indiana State AGfiled 2025-09-09(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/obrien-ryan-20250910.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2025
- Raw hash
- 0775317d2a692a94c6cbdb0cbfacd8d51c0309a899cc24f0da95583cd5ad7b12
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- O'Brien & Ryan, LLP,norm: o brien ryan
- Domain
- obrlaw.com
Incident
- Discovered
- Apr 8, 2025
- Materiality determined
- —
- Notification sent
- Sep 9, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.