HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Seward and Monde
bd_eb194b4ed6ffcc56 · schema v1 · pii pii-v1
Full breach record for Seward and Monde →Seward and Monde, a CPA firm, notified the New Hampshire Attorney General of a data incident affecting 2 NH residents. On Sept 2, 2025, unauthorized access to an employee email account was detected. The investigation confirmed the exposure of names and Social Security numbers. The firm disabled the account, reset credentials, engaged forensic specialists, and mailed notices on Oct 3, 2025, offering 24 months of credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_85849c62c16fbc47Vermont State AGfiled 2025-10-03Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/seward-monde-cpas-20251003.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2025
- Raw hash
- d0f967d2269ed090ce3e92eb67ce1c3342d671c53656e15e164a51c5f2e60f61
Reporting entity
- Name
- Seward and Mondenorm: seward and monde
Victim entity
- Name
- Seward and Mondenorm: seward and monde
Incident
- Discovered
- Sep 2, 2025
- Materiality determined
- —
- Notification sent
- Oct 3, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.