Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSCREDENTIALSMediumContained
Karr & Boucher, PLLC
bd_f593a2f94389b833 · schema v1 · pii pii-v1
Full breach record for Karr & Boucher, PLLC →Karr & Boucher, P.L.L.C., a tax preparation service in Manchester, NH, reported a business email compromise discovered on August 12, 2025. The incident affected 48 individuals, including 37 New Hampshire residents. Compromised data included names, partial SSNs, financial account info, and credit card details. The firm engaged forensic investigators, secured accounts, and provided 12 months of credit monitoring via Kroll. Notifications were mailed on January 7, 2026.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9d8eed3c61a23b5cMaine State AGfiled 2026-01-07Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/karr-boucher-20260107.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 7, 2026
- Raw hash
- c9cdef21fb8a5f5667b40bb5da02c97a1763a324cfa435514e3a801deee17098
Reporting entity
- Name
- Karr & Boucher, PLLCnorm: karr boucher
- Domain
- karrboucher.com
Victim entity
- Name
- Karr & Boucher, PLLCnorm: karr boucher
- Domain
- karrboucher.com
Incident
- Discovered
- Aug 12, 2025
- Materiality determined
- —
- Notification sent
- Jan 7, 2026
- Affected individuals
- 48
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 PhishingT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 21 weeks(148 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.