HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Adams Samartino & Co., PC

bd_b8d16b8e91806516 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 6, 2025

Filed

Sep 2, 2025

To disclose

26 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for Adams Samartino & Co., PC →

Adams Samartino & Co., PC notified the New Hampshire Attorney General of a data incident discovered on March 6, 2025. An unauthorized individual accessed an employee's email account. The breach affected one New Hampshire resident, whose name and Social Security number were potentially accessed. The firm engaged third-party investigators, secured the account, and sent notification letters on August 29, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 26 weeks / 180 days

Mar 6, 2025

Discovered

Sep 2, 2025

Filed

vs. sector median

+8 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_f12f9749ae5adf462025-08-30 · +3dVerified
Maine State AGbd_1509982b30e3f2582025-08-29 · +4dCandidate
Nebraska State AGbd_4d07fac41480d97e2025-08-29 · +4dVerified
Vermont State AGbd_89199f84d4abb2352025-08-29 · +4dVerified

Name: Adams Samartino & Co., PC
norm: adams samartino

Name: Adams Samartino & Co., PC
norm: adams samartino
Industry: Professional Servicesllm

Discovered: Mar 6, 2025
Materiality determined: —
Notification sent: Aug 29, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Consumer Protection Bureau, Office of the Attorney General
Initial access: valid_credentials

During the incident: Took immediate action to secure the account
Engaged a team of third-party specialists to investigate the incident
Reviewed the contents of the email account
Completed the process of obtaining address information for potentially affected individuals
Changes made: Implemented additional technical safeguards to further enhance the security of information in its possession
Offering 12 months of complimentary credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(180 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGAug 29 · first

Nebraska State AGAug 29 · first

Vermont State AGAug 29 · first

Massachusetts State AG+1d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/adams-samartino-20250902.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 2, 2025
Raw hash: 671da3b6b0a0651d73fad4b90e28044c236f6ad69c3b74ab6aaeaa4416747836

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAdams Samartino & Co., PC

Victim entityAdams Samartino & Co., PC

Incidentdiscovered Mar 6, 2025

Stated responseTook immediate action to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov