HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTPIIMediumContained
Wong Fleming
bd_f693e8211a6698ed · schema v1 · pii pii-v1
Full breach record for Wong Fleming →Wong Fleming, a law firm, notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access occurred between Dec 13-14, 2024, involving an external actor copying files containing Social Security numbers. The firm brought systems offline, notified federal law enforcement, and provided 12 months of credit monitoring via Experian to the affected individual.
Leak gap clock✗ Leak >180d13 months discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by ransomhub about this victim predates this filing by 402 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wong-fleming-20260120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 20, 2026
- Raw hash
- 3c2ff4196ab323467312dd04416785f827b8de61549b5dcd8ef6d80bf899fdd1
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Wong Flemingnorm: wong fleming
- Domain
- wongfleming.com
Incident
- Discovered
- Dec 14, 2024
- Materiality determined
- —
- Notification sent
- Jan 20, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided notice to New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 months(402 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.