HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Mengel, Metzger, Barr & Co., LLP
bd_b51da914afab0b17 · schema v1 · pii pii-v1
Full breach record for Mengel, Metzger, Barr & Co., LLP →Mengel, Metzger, Barr & Co., LLP (MMB+CO) reported a supplemental cyberattack affecting 53 New Hampshire residents. The incident occurred on Feb 21, 2025, with PII confirmation on May 19, 2025. Exposed data included names, DOBs, SSNs, driver's licenses, financial accounts, and limited medical info. MMB+CO secured systems, engaged experts, and provided 12 months of credit monitoring. No evidence of misuse found.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_a6330afa9f49b540New Hampshire State AGfiled 2025-06-30(21d gap)Candidate
- bd_57b7a00d71b4193cIndiana State AGfiled 2025-06-26(25d gap)Verified
- bd_b8fa640dea001fc6Maine State AGfiled 2025-06-26(25d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mengel-metzger-barr-20250721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2025
- Raw hash
- 6247c48652c086790bb91e8cb712494a36795c9fed3979e131da5e82693882da
Reporting entity
- Name
- Mengel, Metzger, Barr & Co., LLPnorm: mengel metzger barr
Victim entity
- Name
- Mengel, Metzger, Barr & Co., LLPnorm: mengel metzger barr
Incident
- Discovered
- Feb 21, 2025
- Materiality determined
- May 19, 2025
- Notification sent
- Jun 26, 2025
- Affected individuals
- 53
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted supplemental data incident notification to New Hampshire Consumer Protection Bureau
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.