HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
McElroy, Deutsch, Mulvaney & Carpenter LLP
bd_bd3f74df05a359e3 · schema v1 · pii pii-v1
Full breach record for McElroy, Deutsch, Mulvaney & Carpenter LLP →McElroy, Deutsch, Mulvaney & Carpenter LLP (MDMC) notified the New Hampshire Attorney General of a cyberattack affecting one NH resident. Unauthorized access to MDMC systems occurred March 28–April 1, 2025. MDMC detected suspicious activity on April 3, 2025, and confirmed on December 4, 2025, that names and Social Security numbers were accessed. MDMC notified federal law enforcement, provided 12 months of credit monitoring via Epiq, and is reviewing security policies.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_698f1a0d02962016Indiana State AGfiled 2025-12-19Verified
- bd_efd18d3b3c3e0536Maine State AGfiled 2025-12-19Candidate
- bd_03b000a29a602b0cNew Hampshire State AGfiled 2026-03-12(83d gap)Candidate
- bd_df428c93170c98cfMaine State AGfiled 2026-03-12(83d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mcelroy-deutsch-mulvaney-carpenter-20251219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 19, 2025
- Raw hash
- 2b5a5fbab1cdefe3ced489aab84d6241d00029e9cebe1eb03213fb1fb9d0083b
Reporting entity
- Name
- McElroy, Deutsch, Mulvaney & Carpenter LLPnorm: mcelroy deutsch mulvaney carpenter
- Domain
- mdmc-law.com
Victim entity
- Name
- McElroy, Deutsch, Mulvaney & Carpenter LLPnorm: mcelroy deutsch mulvaney carpenter
- Domain
- mdmc-law.com
Incident
- Discovered
- Apr 3, 2025
- Materiality determined
- —
- Notification sent
- Dec 19, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 37 weeks(260 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.