MCDONALD HOPKINS LLC

Abramson, Brown & Dugan, a law firm in Manchester, NH, notified the NH Attorney General of unauthorized network access discovered around April 2, 2026. The incident potentially affected 1,899 NH residents, exposing names, SSNs, driver's licenses, tax IDs, or financial account numbers. Notifications to residents began September 2, 2026, offering two years of credit monitoring via Cyberscout/TransUnion. The investigation is ongoing.

Doleac Electric Company, Inc. notified the NH Attorney General of unauthorized access to its network between January 26 and February 3, 2026. The company became aware of the incident on February 2, 2026. One New Hampshire resident was affected, with potential exposure of name and Social Security number. The company secured its network, engaged forensic investigators, and provided credit monitoring services to the affected individual.

The City of Keene, New Hampshire, experienced an inadvertent email disclosure on July 23, 2026, where an unredacted document containing names and Social Security numbers was sent to 43 New Hampshire residents. The City recalled the message, investigated, and confirmed the data exposure on July 29, 2026. Affected individuals were notified in late August 2026 and offered 12 months of identity monitoring.

Castle Management, LLC notified the NH Attorney General of an incident where an unauthorized actor may have accessed its network between September 2025 and February 2026. Forensic investigation concluded on August 11, 2026, that personal information of 4 New Hampshire residents, including names, SSNs, DOBs, driver's licenses, and financial account numbers, may have been compromised. The company contained the threat, engaged external cybersecurity professionals, and offered credit monitoring services.

Williams Brothers Construction Co., Inc. detected unauthorized network activity on January 10, 2026. Investigation determined unauthorized access occurred between January 10-11, 2026, affecting approximately 2 New Hampshire residents. Data exposed included names and Social Security numbers. The company engaged third-party cybersecurity experts, secured systems, and is offering one year of complimentary credit monitoring. Notifications were sent on August 19, 2026.

Oakdale Ear Nose & Throat PA d/b/a Minnesota ENT detected unauthorized access to six user email accounts on January 16, 2026. An investigation determined that personal and health information, including SSNs and medical records, may have been accessed from one mailbox. Two New Hampshire residents were affected. The organization secured the network, changed passwords, engaged external cybersecurity professionals, and is offering credit monitoring services.

Bahrie Law, PLLC experienced unauthorized access to its network between March 30 and April 1, 2026. The firm detected the activity on April 2, 2026, and contained the incident. A forensic investigation concluded on July 22, 2026, that personal information of approximately four New Hampshire residents was potentially accessed. Affected data included names, dates of birth, Social Security numbers, financial account information, driver's license numbers, and medical information. The firm is providing credit monitoring and fraud assistance to affected individuals.

Task Force Power, Inc. notified the NH Attorney General that an unauthorized actor accessed limited email accounts between Sept 10, 2025, and Jan 7, 2026. The company discovered the impact on July 21, 2026, after forensic investigation. One New Hampshire resident was affected, with exposure of name, SSN, financial account info, and passport number. No evidence of fraud was found. The company contained the incident, engaged external cybersecurity professionals, and provided credit monitoring to the affected individual.

CTS Journey Holdings, LLC (DBA Corporate Travel Service) notified the NH Attorney General of a cybersecurity incident where an unauthorized actor accessed its network between December 3, 2025, and December 11, 2025. The company discovered on July 2, 2026, that personal information of approximately 8 New Hampshire residents was impacted. Affected data included names, Social Security numbers, financial account information, and credit/debit card numbers. CTS engaged external cybersecurity professionals, contained the threat, and is offering one year of complimentary credit monitoring to affected residents with SSNs.

CareCloud, Inc. notified the New Hampshire Attorney General on July 31, 2026, of a breach affecting approximately 68,886 NH residents. Between March 10 and March 16, 2026, an unauthorized third party accessed a CareCloud AWS environment and exfiltrated data. Affected data included names, SSNs, DOBs, driver's license numbers, and PHI (health insurance, medications, allergies). Credit card info (including CVV) was affected for a limited subset. CareCloud engaged forensic investigators, reported to law enforcement, and is offering credit monitoring and identity theft protection services.

Hilldun Corporation notified the New Hampshire Attorney General of a cybersecurity incident affecting 2 NH residents. Unauthorized access occurred between August 29, 2025, and September 9, 2025. The breach involved the exfiltration of names and Social Security numbers. Hilldun engaged third-party forensic investigators, contained the network, and is offering complimentary credit monitoring to affected individuals. Notification to residents began July 24, 2026.

Questo, Inc. notified the NH Attorney General of unauthorized access to its network affecting approximately 7 New Hampshire residents. The incident occurred between October 1 and October 9, 2025, and was discovered on October 9, 2025. Affected data includes full names, Social Security numbers, and financial account numbers. Questo contained the incident, engaged outside cybersecurity professionals, and is providing complimentary identity monitoring through Kroll to affected individuals.

Tombigbee Healthcare Authority dba Whitfield Regional Hospital notified the NH Attorney General of a cybersecurity incident affecting 2 New Hampshire residents. Unauthorized access occurred between May 15, 2025, and June 8, 2025, and was detected on June 8, 2025. Affected data may include names, dates of birth, medical information, financial account information, driver's license numbers, and Social Security numbers. The hospital secured its network, engaged forensic investigators, and is offering 12 months of credit monitoring.

Averhealth Holdings detected unusual activity in its email environment on January 20, 2026. An investigation concluded on May 6, 2026, that personal information of 12 New Hampshire residents may have been accessed. Affected data included names, dates of birth, diagnoses, health insurance policy numbers, medical costs, dates of service, provider names, medical record numbers, and treatment information. Social Security numbers were not affected. The company secured the email environment, engaged cybersecurity professionals, and offered one year of credit monitoring.

LIA Insurance Administrators, Inc. experienced a business email compromise incident resulting in unauthorized access to email accounts. Data potentially accessed on July 21, 2025, included names and bank routing/account numbers for 13 New Hampshire residents. The company discovered the involvement of personal information on July 7, 2026, after forensic investigation. Notifications were sent starting July 10, 2026. Complimentary credit monitoring was offered.

Fiesta Insurance Franchise Corporation notified the NH Attorney General of a data security incident affecting approximately 6 New Hampshire residents. On June 9, 2025, the company identified unusual activity indicating potential unauthorized access. Following an extensive forensic investigation, it was determined on June 26, 2026, that files containing names and Social Security numbers may have been accessed. The company secured its systems, engaged external cybersecurity professionals, and is providing 12 months of complimentary credit monitoring to affected individuals. No evidence of identity theft or financial fraud has been found.

GWA, LLC notified the NH Attorney General of unauthorized access to one employee email account. Suspicious activity was identified on December 8, 2025, with unauthorized activity occurring on August 6, 2025. The incident affected one New Hampshire resident, whose name and Social Security number were potentially accessed. GWA secured the network, engaged external cybersecurity professionals, and is offering one year of complimentary credit monitoring.

Connecticut Wealth Management, LLC notified the NH Attorney General of unauthorized access to its email systems. The company was alerted to the incident on April 21, 2026, and determined on June 15, 2026, that personal information (name and SSN) of one New Hampshire resident may have been accessed between April 20-21, 2026. The company secured its network, engaged external cybersecurity professionals, and offered 24 months of credit monitoring to the affected individual.

G-Pak Holdings, LLC DBA Easypak notified the NH Attorney General of unauthorized access to its network on January 13, 2026. An investigation revealed that personal information for three New Hampshire residents, including full name, Social Security number, driver's license number, and financial account number, was potentially accessed and copied. Notifications were sent on July 8, 2026, offering one year of complimentary credit monitoring.

Optalis Management Solutions notified the NH Attorney General of unauthorized access to its network between April 14-19, 2025. An investigation concluded June 10, 2026, confirming exfiltration of personal data for approximately 3 NH residents, including names, SSNs, driver's license numbers, financial account info, and medical treatment/diagnosis information. The company engaged outside cybersecurity professionals and is offering credit monitoring. The investigation is ongoing.

Rhodes, Young, Black, and Duncan (RYBD) notified the New Hampshire Attorney General of a cybersecurity incident affecting 7 NH residents. Unauthorized access occurred on September 17, 2025, via a SonicWall firewall vulnerability, leading to data exfiltration. RYBD detected the breach on October 12, 2025, secured the network, and engaged third-party forensic investigators. Personal information compromised included names, SSNs, and driver's license numbers. RYBD is offering complimentary credit monitoring to affected residents.

Marsicovetere & Levine Law Group, P.C. notified the New Hampshire Attorney General of unauthorized network access occurring around April 14, 2026. The breach affected approximately 123 New Hampshire residents, exposing names, SSNs, driver's license numbers, financial account numbers, and medical/health insurance information. The firm engaged forensic investigators, conducted a manual document review, and is offering one year of complimentary credit monitoring to affected individuals.

Burrillville School Department notified the NH AG of unauthorized network access affecting 3 NH residents. Data accessed included names, SSNs, and driver's license numbers between Sept 23-24, 2025. Notification sent June 17, 2026. Credit monitoring offered.

Superior Drywall, Inc. notified the New Hampshire Attorney General of a cybersecurity incident occurring between January 9-12, 2026. The breach compromised the personal information (name, driver's license, SSN) of 6 New Hampshire residents. Discovery occurred on May 22, 2026, following a forensic investigation. Notifications were sent to affected individuals on June 12, 2026, offering credit monitoring services.

Beusa Energy, LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 NH residents. Unauthorized access occurred between July 24-30, 2025, resulting in the exfiltration of names, addresses, SSNs, and health insurance information. Beusa engaged external cybersecurity professionals, confirmed the scope on May 20, 2026, and began notifying residents on June 10, 2026, offering credit monitoring and fraud alert guidance.