HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Optima Tax Relief
bd_f444935c9c21934f · schema v1 · pii pii-v1
Full breach record for Optima Tax Relief →Optima Tax Relief, LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 state residents. Unauthorized access occurred between May 1 and May 6, 2025. The attacker accessed files containing names, SSNs, and payment card numbers. Notifications were mailed on August 15, 2025, offering one year of credit monitoring via Kroll. Law enforcement was notified.
Leak gap clock⏱ Leak >30d15 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
A leak claim by chaos about this victim predates this filing by 69 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/optima-tax-relief-20250815.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 15, 2025
- Raw hash
- d32a321186c052bb4b0083cc72cf3974974f4a20152e93bb261a1fbe04b0431a
Reporting entity
- Name
- Optima Tax Reliefnorm: optima tax relief
- Domain
- optimataxrelief.com
Victim entity
- Name
- Optima Tax Reliefnorm: optima tax relief
- Domain
- optimataxrelief.com
Incident
- Discovered
- May 1, 2025
- Materiality determined
- —
- Notification sent
- Aug 15, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.