HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Marshall & Melhorn, LLC
bd_c0884ed19903020b · schema v1 · pii pii-v1
Full breach record for Marshall & Melhorn, LLC →Marshall & Melhorn, LLC, a law firm, notified the New Hampshire Attorney General of a data event affecting 9 NH residents. On September 14, 2021, an unauthorized actor gained access to the firm's network, potentially accessing files containing PII and SSNs. The firm engaged computer specialists, notified federal law enforcement, implemented additional cybersecurity safeguards, and offered 12 months of credit monitoring via Experian to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_25e56e830e87027bHHS OCRfiled 2023-06-07(5d gap)Verified
- bd_a330133bef4180c8Montana State AGfiled 2023-06-07(5d gap)Verified
- bd_fedf4a0256313e98Vermont State AGfiled 2023-06-07(5d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/marshall-melhorn-20230612.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 12, 2023
- Raw hash
- e8de2f9c37b2b84474240fcfabb573360bbdcbfebd1ca854fdae12d4fcc0a920
Reporting entity
- Name
- Marshall & Melhorn, LLCnorm: marshall melhorn
- Domain
- marshallmelhorn.com
Victim entity
- Name
- Marshall & Melhorn, LLCnorm: marshall melhorn
- Domain
- marshallmelhorn.com
Incident
- Discovered
- Sep 14, 2021
- Materiality determined
- Mar 6, 2023
- Notification sent
- Jun 7, 2023
- Affected individuals
- 9
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement and cooperated in their investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 months(636 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.