HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Mengel, Metzger, Barr & Co., LLP
bd_a6330afa9f49b540 · schema v1 · pii pii-v1
Full breach record for Mengel, Metzger, Barr & Co., LLP →Mengel, Metzger, Barr & Co., LLP reported a cyberattack on February 21, 2025, affecting 44 New Hampshire residents. The incident exposed PII including names, SSNs, driver's licenses, financial account info, and some medical data. The firm detected the incident on May 19, 2025, secured systems, engaged third-party experts, and provided 12 months of credit monitoring to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_57b7a00d71b4193cIndiana State AGfiled 2025-06-26(4d gap)Verified
- bd_b8fa640dea001fc6Maine State AGfiled 2025-06-26(4d gap)Candidate
- bd_b51da914afab0b17New Hampshire State AGfiled 2025-07-21(21d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mengel-metzger-barr-20250630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- 56dd2b664e4466ed7f864cf403076166ff5454372fa3bc2d98ebfda6133d99ea
Reporting entity
- Name
- Mengel, Metzger, Barr & Co., LLPnorm: mengel metzger barr
Victim entity
- Name
- Mengel, Metzger, Barr & Co., LLPnorm: mengel metzger barr
Incident
- Discovered
- May 19, 2025
- Materiality determined
- —
- Notification sent
- Jun 26, 2025
- Affected individuals
- 44
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.