HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Harris, Burnett, Arend & Schmiesing CPA
bd_9ff607749d60599c · schema v1 · pii pii-v1
Full breach record for Harris, Burnett, Arend & Schmiesing CPA →Harris, Burnett, Arend & Schmiesing, CPA reported a data security incident to the New Hampshire Attorney General on August 11, 2025. The firm discovered suspicious activity on July 2, 2025, involving unauthorized access to one New Hampshire resident's information, including names, SSNs, and financial data. The investigation has concluded, and the firm has notified the affected individual, offering 12 months of IDX identity protection services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d9d87e937183103bMaine State AGfiled 2025-08-11(7d gap)Candidate
- bd_f3cc1f01803d4f07Indiana State AGfiled 2025-08-07(11d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/harris-burnett-arend-schmiesing-20250818.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 18, 2025
- Raw hash
- 90e514cfcb9025a4409fab9422370f34d5d709bc6844810713cb37cdc3ecac66
Reporting entity
- Name
- Harris, Burnett, Arend & Schmiesing CPAnorm: harris burnett arend schmiesing cpa
Victim entity
- Name
- Harris, Burnett, Arend & Schmiesing CPAnorm: harris burnett arend schmiesing cpa
Incident
- Discovered
- Jul 2, 2025
- Materiality determined
- —
- Notification sent
- Aug 11, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Department of Justice, Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.