Social EngineeringVishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
FOLEY & LARDNER LLP
bd_d60314d578e1be2e · schema v1 · pii pii-v1
Full breach record for FOLEY & LARDNER LLP →Foley & Lardner LLP reported a vishing incident to the New Hampshire Attorney General on December 23, 2025. Unauthorized access occurred between April 17 and April 22, 2025, affecting approximately 2 New Hampshire residents. The incident involved the unauthorized acquisition of names and Social Security numbers. Foley engaged external cybersecurity specialists, reset passwords, notified the FBI, and offered 12 months of credit monitoring and identity protection services through IDX.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_4da4609aaf3c345cVermont State AGfiled 2025-12-23Verified
- bd_898cb8813948a3a4Maine State AGfiled 2025-12-23Candidate
- bd_89b9db805c170f69Indiana State AGfiled 2025-12-23Verified
- bd_cf1750c27662f9d5Texas State AGfiled 2025-12-29(6d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/foley-lardner-20251223.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2025
- Raw hash
- f2eb592c745aac6c9cd6349e48fdbbe9a7e6e59c968890469c9e1b7767a0aa34
Reporting entity
- Name
- FOLEY & LARDNER LLPnorm: foley lardner
- Domain
- foley.com
Victim entity
- Name
- FOLEY & LARDNER LLPnorm: foley lardner
- Domain
- foley.com
Incident
- Discovered
- Apr 28, 2025
- Materiality determined
- —
- Notification sent
- Dec 23, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation regarding the incident
- Initial access
- phishing_link
Compliance
- Time to disclose
- 34 weeks(239 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.