HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Gelinas & Ward LLP

bd_ba60308e204d5133 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 6, 2024

Filed

Jun 26, 2025

To disclose

33 weeks

Affected

15state residents only

Linked

6 filings

Confidence

66%

Full breach record for Gelinas & Ward LLP →

Gelinas & Ward LLP notified the NH Attorney General of an incident where files containing PII (SSN, driver's license, payment card numbers) were copied from their network without authorization on November 6, 2024. The firm became aware of suspicious activity on the same date. 15 New Hampshire residents were affected. The investigation is ongoing. The firm notified federal law enforcement and is offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 33 weeks / 232 days

Nov 6, 2024

Begins

Nov 6, 2024

Discovered

Jun 26, 2025

Filed

vs. sector median

+14 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_3713e7dbc24c890c2025-06-26Verified
Maine State AGbd_a7346ce3baf6acd82025-06-26Candidate
Vermont State AGbd_ad7590a1ec3e17f22025-06-26Verified
Massachusetts State AGbd_cf4241c3b67f5b5e2025-07-08 · +12dVerified by operator

Show 1 more filing ↓up to 43d gap

New Hampshire State AGbd_7a6fa05d81dad7c22025-08-08 · +43dVerified

Name: Gelinas & Ward LLP
norm: gelinas ward

Name: Gelinas & Ward LLP
norm: gelinas ward
Industry: Professional Servicesllm

Discovered: Nov 6, 2024
Breach occurred: Nov 6, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 26, 2025
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcement regarding the eventProvided written notice of this incident to relevant state regulators, as necessary

During the incident: Investigated and responded to the incident
Assessed the security of Gelinas & Ward systems
Identified potentially affected individuals
Notified federal law enforcement regarding the event
Provided access to complimentary credit monitoring services for twelve (12) months, through TransUnion to notified individuals
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided individuals with information on how to place a fraud alert and security freeze on one’s credit file
Provided written notice of this incident to relevant state regulators, as necessary
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(232 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

Massachusetts State AGJun 26 · first

Maine State AGJun 26 · first

Vermont State AGJun 26 · first

New Hampshire State AGJun 26 · first · this page

Massachusetts State AG+12d

New Hampshire State AG+43d

Pattern: first filing Jun 26 (MA), last Aug 8 (NH) — a 43-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gelinas-ward-20250626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2025
Raw hash: 709fed1d02e87c6e95bf5b4d68c49ae9f34e412f1e4aa430aea60b12deed3129

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityGelinas & Ward LLP

Victim entityGelinas & Ward LLP

Incidentdiscovered Nov 6, 2024

Stated responseInvestigated and responded to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov