UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDHighContained

H&N Tax, Inc

bd_efcdb3c974c3d568 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Feb 20, 2026

To disclose

—

Affected

1,068state residents only

Linked

4 filings

Confidence

66%

Full breach record for H&N Tax, Inc →

H&N Tax, Inc. d/b/a CSA Tax notified the NH Attorney General of a data security event where unauthorized access occurred on December 2, 2025. The incident affected 1,068 New Hampshire residents, exposing first/last names and Social Security numbers. The company engaged forensic specialists, secured its environment, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 2, 2025

Begins

Feb 20, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_3d4f05ec1dffaa1b2026-02-20Candidate
Vermont State AGbd_f80f9ab6352f9e982026-02-20Verified
Massachusetts State AGbd_6cb4887bd2bd38a02026-02-21 · +1dVerified

Name: H&N Tax, Inc. d/b/a CSA Tax
norm: h n tax
Domain: cipriani.com

Name: H&N Tax, Inc
norm: h n tax
Also named: H&N Tax, Inc.dba oflegal entity
CSA Taxdba oftrade name
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 2, 2025
Materiality determined: —
Notification sent: Feb 20, 2026
Affected individuals: 1,068state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

During the incident: Engaged third-party computer forensic specialists to assist with determining the nature and scope of the event
Took steps to secure their environment
Conducted an investigation
Began providing notice to the potentially impacted individuals on February 20, 2026, via U.S. mail
Changes made: Implemented additional technical safeguards to further enhance the security of information in its possession and to prevent similar events from happening in the future
Offering the potentially impacted individuals complimentary credit monitoring and identity protection services
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGFeb 20 · first

Vermont State AGFeb 20 · first

New Hampshire State AGFeb 20 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/h-n-tax-csa-tax-20260220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2026
Raw hash: b492278ff550bc66059e7ffee0a4036ef95158b86280f011a8fe54fb691d061c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityH&N Tax, Inc. d/b/a CSA Tax

Victim entityH&N Tax, Inc

IncidentUnknown

Stated responseEngaged third-party computer forensic specialists to assist with determining the nature and scope of the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov