HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Bauman & Krasnoff LLP
bd_a5a94bd23c399a84 · schema v1 · pii pii-v1
Full breach record for Bauman & Krasnoff LLP →Bauman & Krasnoff LLP reported unauthorized access to a third-party cloud storage system between Jan 19 and Mar 26, 2025. Suspicious activity was detected on Mar 26, 2025. Five New Hampshire residents were affected, with data including names, SSNs, driver's licenses, financial account numbers, and health information exposed. The firm engaged forensic experts, reset passwords, deployed endpoint monitoring, and offered 12 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bauman-krasnoff-20250812.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 12, 2025
- Raw hash
- 9f8e74f61cda24d58593e49cc04cba9952a005bf352332d5d6a0b1ca068a5bbd
Reporting entity
- Name
- Bauman & Krasnoff LLPnorm: bauman krasnoff
Victim entity
- Name
- Bauman & Krasnoff LLPnorm: bauman krasnoff
Incident
- Discovered
- Mar 26, 2025
- Materiality determined
- —
- Notification sent
- Jul 31, 2025
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with New Hampshire Department of Justice
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(139 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.