Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Semple, Marchal & Cooper, LLP
bd_bfeff61d1a7e6359 · schema v1 · pii pii-v1
Full breach record for Semple, Marchal & Cooper, LLP →SmartRent Technologies, Inc. reported a data security incident involving its third-party accounting vendor, Semple Marchal and Cooper, LLP (SMC). SMC experienced unauthorized access to an internal share drive via a phishing campaign in February 2025. The incident potentially exposed personal information of SmartRent current and former employees, including names, addresses, SSNs, and employment data. One New Hampshire resident was identified. SmartRent notified the NH Attorney General on August 6, 2025, and offered 24 months of credit monitoring.
Leak gap clock⏱ Leak >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by interlock about this victim predates this filing by 91 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/smartrent-technologies-20250806.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 6, 2025
- Raw hash
- 7f0d22609f6f82262380366f60dae6be6f2f534d9283a06ed28458848a2e3471
Reporting entity
- Name
- SmartRentnorm: smartrent
- Domain
- smartrent.com
Victim entity
- Name
- Semple, Marchal & Cooper, LLPnorm: semple marchal cooper
- Domain
- https:semplecpa.com
Incident
- Discovered
- May 10, 2025
- Materiality determined
- —
- Notification sent
- Aug 7, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection Bureau
- Third party
- via Semple Marchal and Cooper, LLP
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.