HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumActive

Legal Aid Service of Broward County

bd_ab4b9e5cd209c80d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 10, 2025

Filed

Feb 17, 2026

To disclose

12 months

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for Legal Aid Service of Broward County →2 incidents on file

Legal Aid Service of Broward County notified the NH Attorney General of unauthorized access to an employee's email account on or about February 10, 2025. The investigation, which concluded on January 5, 2026, determined that personal information, including full names and Social Security numbers, of approximately two New Hampshire residents was compromised. The organization is offering one year of complimentary credit monitoring and advising residents on fraud alerts and security freezes. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 months / 372 days

Feb 10, 2025

Begins

Feb 10, 2025

Discovered

Feb 17, 2026

Filed

vs. sector median

+34 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_bef08f846cbdd3da2026-02-10 · +7dVerified
Indiana State AGbd_c76e93ab5b2d90182026-02-02 · +15dCandidate

Name: Legal Aid Service of Broward County
norm: legal aid service of broward county

Name: Legal Aid Service of Broward County
norm: legal aid service of broward county
Industry: Professional Servicesllm

Discovered: Feb 10, 2025
Breach occurred: Feb 10, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2026
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified the Office of the Attorney General of New Hampshire

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Conducted a comprehensive investigation and document review
Providing the affected residents with written notification of this incident
Offering the affected residents whose Social Security numbers were impacted complimentary one-year memberships with a credit monitoring service
Advising the affected residents about the process for placing fraud alerts and/or security freezes on their credit files and obtaining free credit reports
Provided with the contact information for the consumer reporting agencies and the Federal Trade Commission
Set up a dedicated and confidential toll-free response line
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 months(372 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGFeb 2 · first

Massachusetts State AG+8d

New Hampshire State AG+15d · this page

Pattern: first filing Feb 2 (IN), last Feb 17 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/legal-aid-service-broward-county-20260217.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 17, 2026
Raw hash: 5299780e8593f296fcd35549fc2a57bd9cb6c21d9a4522e8374b470e7fad3c45

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLegal Aid Service of Broward County

Victim entityLegal Aid Service of Broward County

Incidentdiscovered Feb 10, 2025

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov