HackingProfessional ServicesProfessional ServicesDelayed DiscoveryCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Hamill & Kaplan, LLP

bd_d36977b8d853a815 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 7, 2026

Filed

Aug 13, 2026

To disclose

5 weeks

Affected

5state residents only

Confidence

66%

Full breach record for Hamill & Kaplan, LLP →2 incidents on file

Hamill & Kaplan, LLP notified the NH Attorney General of a data breach where an unauthorized user accessed their network on September 19, 2025. The full extent was discovered on July 7, 2026. Five New Hampshire residents were affected. Potentially compromised data includes SSNs, government IDs, names, and bank account information. The firm secured the network, engaged IT specialists, notified regulators (FBI, IRS, Secret Service), and sent notifications to affected individuals on August 3, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 291 days

discovery → filing · 5 weeks / 37 days

Sep 19, 2025

Begins

Jul 7, 2026

Discovered

Aug 13, 2026

Filed

vs. sector median

13 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident

Name: Hamill & Kaplan, LLP
norm: hamill kaplan

Name: Hamill & Kaplan, LLP
norm: hamill kaplan
Industry: Professional Servicesllm

Discovered: Jul 7, 2026
Breach occurred: Sep 19, 2025
Undetected for: 291 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2026
Affected individuals: 5state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney GeneralNotified the FBINotified the IRSNotified the Franchise Tax BoardNotified the Secret Service

During the incident: Took measures to ensure the network was secure
Began an investigation with third party IT specialists
Sent statutory notification letters to all potentially affected individuals
Notified the FBI, IRS, Franchise Tax Board, and Secret Service
Changes made: Continuing to work with cybersecurity experts to reinforce their systems and security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hamil-kaplan-20260813.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2026
Raw hash: da480d139730116a18c6d91a410436942df598d8028c24ec9aad1690e9379dea

Reporting entityHamill & Kaplan, LLP

Victim entityHamill & Kaplan, LLP

Incidentdiscovered Jul 7, 2026

Stated responseTook measures to ensure the network was secure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov