HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

TKH Group

bd_f93f58455746d3c3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 21, 2025

Filed

Jan 15, 2026

To disclose

17 weeks

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for TKH Group →

TKH Group, PC notified the New Hampshire Attorney General on January 15, 2026, of a cybersecurity incident detected on September 21, 2025. The breach affected one New Hampshire resident, exposing personal information including names, addresses, dates of birth, financial/banking information, Social Security Numbers, and driver's licenses. TKH engaged third-party forensic investigators, reported the incident to authorities, and provided one year of credit monitoring services to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 116 days

Sep 21, 2025

Discovered

Jan 15, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_1f584e0058c4c2302026-01-15Verified
Indiana State AGbd_4a5c35a791666f7c2026-01-15Candidate
Indiana State AGbd_88b1ef0238001f252026-01-15Candidate
Vermont State AGbd_90a7be27efc130432026-01-15Verified

Show 1 more filing ↓

Maine State AGbd_fbe015afff29d7b62026-01-15Verified

Name: TKH Group
norm: tkh group

Name: TKH Group
norm: tkh group
Industry: Professional Servicesllm

Discovered: Sep 21, 2025
Materiality determined: —
Notification sent: Jan 15, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported the incident to state and federal authorities
Initial access: exploit_public_facing

During the incident: Initiated a cybersecurity incident response effort involving the use of third-party cybersecurity and digital forensics investigators
Reported the incident to state and federal authorities, as well as to major credit reporting agencies
Providing individuals whose information may have been affected with access to Single Bureau Credit Monitoring services at no charge through Epiq-Privacy Solutions ID
Changes made: Secure its systems, and prevent further unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Nebraska State AGJan 15 · first

Indiana State AGJan 15 · first

Vermont State AGJan 15 · first

Maine State AGJan 15 · first

New Hampshire State AGJan 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tkh-group-20260115.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 15, 2026
Raw hash: ddbd7e0dbba16852949d3ea7c55edd85e2d10047ba33608969c59590a00477e3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTKH Group

Victim entityTKH Group

Incidentdiscovered Sep 21, 2025

Stated responseInitiated a cybersecurity incident response effort involving the use of third-party cybersecurity and digital forensics investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov