HackingIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Orenstein Law PLLC
bd_ffd05d416e9d389f · schema v1 · pii pii-v1
Full breach record for Orenstein Law PLLC →Orenstein Law PLLC d/b/a Atlas Orange notified the NH AG of a September 2025 email account compromise affecting 4 NH residents. Unauthorized access occurred to employee email, exposing names, SSNs, and driver's license details. The firm engaged third-party specialists, secured accounts, and sent notices with 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1a09dcdab80e113fVermont State AGfiled 2026-01-28Verified
- bd_6c06c9e3cc968e34Indiana State AGfiled 2026-01-28Candidate
- bd_95164bbce7c6b26cMaine State AGfiled 2026-01-28Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/orenstein-law-atlas-orange-20260128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2026
- Raw hash
- 411b68335fb53d6a84a7e64b90148390444dd5271476bb9238cfea39300b3a5e
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- Orenstein Law PLLCnorm: orenstein law
Incident
- Discovered
- Sep 4, 2025
- Materiality determined
- —
- Notification sent
- Jan 28, 2026
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 weeks(146 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.