HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedGovernment IDFinancial accountPIIMediumContained

Tynan & Lannone

bd_9ccd657a2eb495db · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 14, 2024

Filed

Jun 6, 2025

To disclose

29 weeks

Affected

15state residents only

Linked

4 filings

Confidence

66%

Full breach record for Tynan & Lannone →

Tynan & Iannone reported a data security incident to the New Hampshire Attorney General. On November 14, 2024, the firm discovered a network disruption. An investigation determined unauthorized actors copied files containing personal information, including SSNs, driver's license numbers, and financial account numbers. 15 New Hampshire residents were notified on June 5, 2025. The firm engaged cybersecurity experts, reported the incident to the FBI, and offered complimentary identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 weeks / 204 days

Nov 14, 2024

Discovered

Apr 7, 2025

Scope determined

Jun 6, 2025

Filed

vs. sector median

+10 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_08ef369ce00c95b52025-06-06Verified
Massachusetts State AGbd_d62ae180194e53d12025-06-07 · +1dVerified
Indiana State AGbd_9ab2030c4edf3a352025-06-05 · +1dCandidate

Name: TYNAN
norm: tynan
Domain: tynanofficial.com

Name: Tynan & Lannone
norm: tynan lannone
Industry: Professional Servicesllm

Discovered: Nov 14, 2024
Materiality determined: Apr 7, 2025
Notification sent: Jun 5, 2025
Affected individuals: 15state-resident count only
Data types: Government IDFinancial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI and will cooperate with any resulting investigation

During the incident: Engaged independent cybersecurity experts to assist with the process
Took steps to secure its network environment
Launched an investigation to determine what happened and the scope of personal information potentially impacted
Implemented measures to enhance the security of its environment
Reported the incident to the FBI
Cooperated with any resulting investigation
Notified all potentially impacted individuals of this incident
Offered them access to complimentary identity monitoring services
Established a toll-free call center through TransUnion
Changes made: Implemented measures to enhance the security of its environment in an effort to minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(204 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJun 5 · first

Vermont State AG+1d

New Hampshire State AG+1d · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tynan-iannone-20250606.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2025
Raw hash: 22b43234a1659d151dcb5a5744fd4faf02593eca86a4ea8c7c318a55d97ba536

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTYNAN

Victim entityTynan & Lannone

Incidentdiscovered Nov 14, 2024

Stated responseEngaged independent cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov