Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICCREDENTIALSLowContained
NH Legal Assistance
bd_eff2aa2aa3f732a8 · schema v1 · pii pii-v1
Full breach record for NH Legal Assistance →New Hampshire Legal Assistance (NHLA) notified consumers of a September 9, 2024 incident where an employee email account was compromised via suspicious activity, likely phishing. The unauthorized access exposed personal information (names, data elements) stored within the account. NHLA engaged third-party cybersecurity specialists, is reviewing security policies, and is offering 12-24 months of complimentary identity monitoring through Kroll to affected individuals.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_45f5ec24dba34dffNew Hampshire State AGfiled 2025-02-06Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-02-06-new-hampshire-legal-assistance-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2025
- Raw hash
- d9e66c06e9844bba21a0767b07d7e5ab3990a063b3f8fe750dd23eafdbd95440
Reporting entity
- Name
- NH Legal Assistancenorm: nh legal assistance
- Domain
- nhla.org
Victim entity
- Name
- NH Legal Assistancenorm: nh legal assistance
- Domain
- nhla.org
Incident
- Discovered
- Sep 9, 2024
- Materiality determined
- Feb 6, 2025
- Notification sent
- Feb 6, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.