HackingStolen CredentialsTargetedFINANCIALPIILowContained
Keeler Accounting: Bookkeeping, Payroll, Tax Professionals
bd_f168ff685b8096ee · schema v1 · pii pii-v1
Full breach record for Keeler Accounting: Bookkeeping, Payroll, Tax Professionals →Keeler Accounting Associates, LLC notified the NH AG of a security incident on Sept 2, 2025, where unauthorized ScreenConnect software was installed on three workstations, allowing external remote access. Approx. 450 NH residents affected. Client financial data on Q: drive may have been accessed. No evidence of misuse found. Remediation included reimaging systems, password resets, MFA enforcement, and EDR deployment.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed450 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/keeler-accounting-20251002.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 2, 2025
- Raw hash
- 65bd4b68509b0e8f09ad3fcf02f217177228030f536fe44b610f96b7632c4b59
Reporting entity
- Name
- Keeler Accounting: Bookkeeping, Payroll, Tax Professionalsnorm: keeler accounting bookkeeping payroll tax professionals
- Domain
- keelercpa.com
Victim entity
- Name
- Keeler Accounting: Bookkeeping, Payroll, Tax Professionalsnorm: keeler accounting bookkeeping payroll tax professionals
- Domain
- keelercpa.com
Incident
- Discovered
- Sep 2, 2025
- Materiality determined
- —
- Notification sent
- Sep 10, 2025
- Affected individuals
- 450
- Data types
- FINANCIALPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed notice with New Hampshire Attorney General pursuant to RSA 359-C;20
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.