HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Shah, Dixit & Associates PC
bd_efc515400ed296bf · schema v1 · pii pii-v1
Full breach record for Shah, Dixit & Associates PC →Shah Dixit & Associates P.C. notified the New Hampshire Attorney General of an unauthorized third-party intrusion on December 22, 2023. The incident affected 189 New Hampshire residents, with personal information including government IDs and contact details exfiltrated. The firm engaged cybersecurity experts, notified law enforcement, and provided credit monitoring services to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_92fd4eb43279a6cfMaine State AGfiled 2024-03-08Candidate
- bd_f6d6259d8b60b504Indiana State AGfiled 2024-03-07(1d gap)Verified
- bd_0e7f5a9de996fdeeVermont State AGfiled 2024-02-07(30d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/shah-dixit-associates-20240308.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 8, 2024
- Raw hash
- cdd7e95d76c53fe3b98a572a0c2bf9974a6e8aa2da1210a20b0c8ecee1162376
Reporting entity
- Name
- Shah, Dixit & Associates PCnorm: shah dixit associates
- Domain
- shahdixit.com
Victim entity
- Name
- Shah, Dixit & Associates PCnorm: shah dixit associates
- Domain
- shahdixit.com
Incident
- Discovered
- Dec 22, 2023
- Materiality determined
- Feb 26, 2024
- Notification sent
- Mar 7, 2024
- Affected individuals
- 189
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of Justice / Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.