MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

The Kerner Group

bd_da2e693b4f631d56 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 13, 2025

Filed

Dec 1, 2025

To disclose

11 weeks

Affected

1state residents only

Linked

3 filings

Confidence

65%

Full breach record for The Kerner Group →

The Kerner Group, Inc. notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access occurred between July 8 and September 13, 2025, involving file encryption and exfiltration of names, SSNs, driver's licenses, financial accounts, and passport numbers. Kerner engaged forensic specialists, secured systems, notified law enforcement, and provided one year of credit monitoring via Epiq.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 67 days

discovery → filing · 11 weeks / 79 days

Jul 8, 2025

Begins

Sep 13, 2025

Discovered

Dec 1, 2025

Filed

vs. sector median

8 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_927dd761153bcfdc2025-11-28 · +3dCandidate
Massachusetts State AGbd_cfec150b404285d22025-11-28 · +3dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: The Kerner Group
norm: the kerner
Industry: Professional Servicesllm

Discovered: Sep 13, 2025
Breach occurred: Jul 8, 2025 – Sep 13, 2025
Undetected for: 67 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 28, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau

During the incident: Engaged third-party cybersecurity and digital forensic specialists
Secured systems
Launched an investigation
Undertook a comprehensive review of internal records
Identified contact information to provide notifications
Notified federal law enforcement
Provided access to credit monitoring services for one (1) year through Epiq Global
Established a dedicated assistance telephone line
Changes made: Working to implement additional safeguards and training to its employees
Provided guidance on how to better protect against identity theft and fraud
Provided information on how to place a fraud alert and security freeze on one’s credit file
Provided information on protecting against tax fraud
Provided contact details for the national consumer reporting agencies
Provided information on how to obtain a free credit report
Encouraged individuals to remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports
Encouraged individuals to contact the Federal Trade Commission, their state Attorney General, and law enforcement
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(79 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGNov 28 · first

Massachusetts State AGNov 28 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kerner-group-20251201.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 1, 2025
Raw hash: f18c40d0eb018d61a4f27545b40aca45cdb69cf38cfc95eb9456fd71f7e40eec

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityThe Kerner Group

Incidentdiscovered Sep 13, 2025

Stated responseEngaged third-party cybersecurity and digital forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov