Social EngineeringPhishingBECRansom DemandedData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Charles Pratt & Co. LLC
bd_fabaa76a4e475914 · schema v1 · pii pii-v1
Full breach record for Charles Pratt & Co. LLC →Charles Pratt & Company, LLC notified the NH AG of a phishing incident where an employee clicked a malicious link, compromising their email. The attacker used the account to execute a Business Email Compromise (BEC) fraud on June 26, 2025. Forensic review later revealed the attacker accessed a file containing client PII (SSNs, DOBs, bank accounts) around June 23, 2025. One NH resident was notified.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5d884f8abd19d423Vermont State AGfiled 2025-12-09(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/charles-pratt-20251215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2025
- Raw hash
- 7fdab9559a5b819b148b04412f01807a08e2156a9f53b0bf3615660bdbe4e232
Reporting entity
- Name
- Charles Pratt & Co. LLCnorm: charles pratt
- Domain
- charlespratt.com
Victim entity
- Name
- Charles Pratt & Co. LLCnorm: charles pratt
- Domain
- charlespratt.com
Incident
- Discovered
- Jul 8, 2025
- Materiality determined
- —
- Notification sent
- Dec 11, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 23 weeks(160 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.