HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Phillip Galyen, PC
bd_a856f09d7a9a9456 · schema v1 · pii pii-v1
Full breach record for Phillip Galyen, PC →Bailey & Galyen, a law firm, notified the New Hampshire Attorney General of a data event affecting 3 state residents. An unknown actor accessed the network on November 4, 2025, potentially downloading names and Social Security numbers. The firm engaged external cybersecurity experts, secured the network, and offered 12 months of credit monitoring and ID theft recovery services to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_e2c4720b144c29f8Vermont State AGfiled 2026-05-21(1d gap)Verified
- bd_760daae48941329fIndiana State AGfiled 2026-05-19(1d gap)Verified
- bd_5dbe0e71190febbeTexas State AGfiled 2026-05-22(2d gap)Verified by operator
- bd_ea538f6713e1e9e7Massachusetts State AGfiled 2026-05-01(19d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/phillip-galyen-bailey-galyen-20260520.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 20, 2026
- Raw hash
- 32af5f4fe056efc7068d666f712a305297c158c36ec00630264474b31a6761eb
Reporting entity
- Name
- Phillip Galyen, PCnorm: phillip galyen
Victim entity
- Name
- Phillip Galyen, PCnorm: phillip galyen
Incident
- Discovered
- Nov 4, 2025
- Materiality determined
- —
- Notification sent
- May 19, 2026
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(197 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.