Social EngineeringProfessional ServicesProfessional ServicesPhishingDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighActive

Patterson-Schwartz & Associates, Inc.

bd_bb341050d8abb32d · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Nov 6, 2025

To disclose

—

Affected · nationwide

1,5312 in this filing

Linked

4 filings

Confidence

66%

Full breach record for Patterson-Schwartz & Associates, Inc. →2 incidents on file

Patterson-Schwartz & Associates, Inc. (PSA), a Delaware real estate company, notified the New Hampshire Attorney General on November 6, 2025, of a phishing incident affecting approximately 2 NH residents. Unauthorized parties accessed two internal email accounts on or about May 14 and May 29, 2025. The emails contained PII including names, SSNs, and financial account numbers. PSA secured accounts, engaged forensic experts, and delayed notification due to insurance coverage issues. 1,531 individuals were identified nationwide; 2 are NH residents. PSA is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

May 14, 2025

Begins

Nov 6, 2025

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_4cdb835e18881f3d2025-11-06Verified
Maine State AGbd_985e4bb7f93e31c82025-11-06Candidate
Indiana State AGbd_ca0db97399ea5d572025-11-06Verified

Name: Patterson-Schwartz & Associates, Inc.
norm: patterson schwartz associates

Name: Patterson-Schwartz & Associates, Inc.
norm: patterson schwartz associates
Industry: Professional Servicesllm

Discovered: —
Breach occurred: May 14, 2025 – May 29, 2025
Materiality determined: —
Notification sent: Nov 6, 2025
Affected individuals: 1,531state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Secured the compromised accounts
Launched a thorough investigation with the assistance of a cybersecurity firm
Implemented enhanced security controls across its network
Mandating enhanced multi-factor authentication (MFA) for all employees
Conducting additional cybersecurity training
Alerted its cyber insurance company
Obtained insurance coverage and support for the data breach response
Used TransUnion's National Change of Address Service and database searches to track down contact information
Mailing letters to the affected individual(s)
Changes made: Implemented enhanced security controls across its network
Mandating enhanced multi-factor authentication (MFA) for all employees
Conducting additional cybersecurity training to help staff recognize and avoid future phishing attempts
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGNov 6 · first

Maine State AGNov 6 · first

Indiana State AGNov 6 · first

New Hampshire State AGNov 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/patterson-schwartz-20251106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2025
Raw hash: 1cacae203cc49fbfc8d578750bb3ade85c731a131f808585221026e5ccd4f09f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityPatterson-Schwartz & Associates, Inc.

Victim entityPatterson-Schwartz & Associates, Inc.

IncidentPhishing

Stated responseSecured the compromised accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov