HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
PDL Pratt Associates LLC
bd_d0d4d6ccda09c9d1 · schema v1 · pii pii-v1
Full breach record for PDL Pratt Associates LLC →Pratt & Associates LLC, a tax and accounting firm, notified the New Hampshire Attorney General of a data security incident affecting 8 NH residents. An unknown actor gained unauthorized access to an email account on July 29, 2025, potentially acquiring files containing names, SSNs, and driver's license numbers. The breach was detected on July 30, 2025, and notifications were sent on December 30, 2025. No evidence of misuse was found. Affected individuals received 12 months of credit monitoring and identity protection services via Epiq.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_25940b61997332acVermont State AGfiled 2025-12-30Candidate
- bd_44c6cef4cbb2eeb6Indiana State AGfiled 2025-12-30Verified
- bd_8af94f2c29f62a35Maine State AGfiled 2025-12-30Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/pratt-associates-20251230.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2025
- Raw hash
- ea0bd930819d0112c027607147d2d261b84ff63f292b2baa61b681dfcb604ea7
Reporting entity
- Name
- Constangy, Brooks, Smith & Prophete, LLPnorm: constangy brooks smith prophete
Victim entity
- Name
- PDL Pratt Associates LLCnorm: pdl pratt associates
- Industry
- professional_services
Incident
- Discovered
- Jul 30, 2025
- Materiality determined
- —
- Notification sent
- Dec 30, 2025
- Affected individuals
- 8
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(153 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.