HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Government IDFinancial accountMediumContained

Hunter & Associates

bd_9bcb80f8397c1eb4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 29, 2026

Filed

Jun 18, 2026

To disclose

7 weeks

Affected

10state residents only

Linked

4 filings

Confidence

66%

Full breach record for Hunter & Associates →

Hunter Associates, a financial services firm, notified the New Hampshire Attorney General of a data event involving its third-party vendor, FoxTrot, LLC. Unauthorized access occurred on April 22, 2026, potentially exposing names, Social Security numbers, and investment account numbers of 10 New Hampshire residents. Hunter discovered the incident on April 29, 2026, and notified individuals on June 15, 2026. Hunter terminated the vendor relationship and provided 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 7 weeks / 50 days

Apr 22, 2026

Begins

Apr 29, 2026

Discovered

Jun 18, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_222980c0c19783232026-06-18Verified
Indiana State AGbd_0ff20c0606daf6452026-06-15 · +3dCandidate
Nebraska State AGbd_99b166300f1d44f62026-06-15 · +3dVerified

Name: C & W Law Group, P.C.
norm: c w law
Domain: cwattorneys.law

Name: Hunter & Associates
norm: hunter associates
Domain: hunter-and-associates.com
Industry: Financial Servicesllm

Discovered: Apr 29, 2026
Breach occurred: Apr 22, 2026
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 15, 2026
Affected individuals: 10state-resident count only
Data types: Government IDFinancial account
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Notified New Hampshire Office of the Attorney General, Consumer Protection Bureau
Third party: via FoxTrot, LLC
Initial access: supply_chain

During the incident: Hunter conducted a thorough review of the potentially affected files
Hunter has discontinued its relationship with this vendor
Hunter has offered potentially impacted individuals complimentary access to 24 months of credit monitoring and identity protection services
Changes made: Discontinued relationship with third-party vendor FoxTrot, LLC
Offered 24 months of credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJun 15 · first

Nebraska State AGJun 15 · first

Massachusetts State AG+3d

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hunter-associates-20260618.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2026
Raw hash: e71ba4ec83a4eb273cb17b69d4a30f2fa5d67b7b18d47adfa98c30a7fc6bc4f2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityC & W Law Group, P.C.

Victim entityHunter & Associates

Incidentdiscovered Apr 29, 2026

Stated responseHunter conducted a thorough review of the potentially affected files

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov