MCDONALD HOPKINS LLC

Bridgewell, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting one NH resident. Unauthorized access to the iSolved employee benefits portal occurred on April 6, 2026, and was contained by June 15, 2026. Data accessed included name, SSN, financial account number, and health insurance ID. The victim received written notice and 12 months of complimentary identity theft protection.

Rhodes, Young, Black, and Duncan (RYBD) notified the New Hampshire Attorney General of a cybersecurity incident affecting 7 NH residents. Unauthorized access occurred on September 17, 2025, via a SonicWall firewall vulnerability, leading to data exfiltration. RYBD detected the breach on October 12, 2025, secured the network, and engaged third-party forensic investigators. Personal information compromised included names, SSNs, and driver's license numbers. RYBD is offering complimentary credit monitoring to affected residents.

Marsicovetere & Levine Law Group, P.C. notified the New Hampshire Attorney General of unauthorized network access occurring around April 14, 2026. The breach affected approximately 123 New Hampshire residents, exposing names, SSNs, driver's license numbers, financial account numbers, and medical/health insurance information. The firm engaged forensic investigators, conducted a manual document review, and is offering one year of complimentary credit monitoring to affected individuals.

Superior Drywall, Inc. notified the New Hampshire Attorney General of a cybersecurity incident occurring between January 9-12, 2026. The breach compromised the personal information (name, driver's license, SSN) of 6 New Hampshire residents. Discovery occurred on May 22, 2026, following a forensic investigation. Notifications were sent to affected individuals on June 12, 2026, offering credit monitoring services.

Beusa Energy, LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting 3 NH residents. Unauthorized access occurred between July 24-30, 2025, resulting in the exfiltration of names, addresses, SSNs, and health insurance information. Beusa engaged external cybersecurity professionals, confirmed the scope on May 20, 2026, and began notifying residents on June 10, 2026, offering credit monitoring and fraud alert guidance.

Allred Tax Advisors, PLLC notified the New Hampshire Attorney General on June 4, 2026, of unauthorized network access identified on October 17, 2025. The incident potentially affected 4 New Hampshire residents, exposing full names and Social Security numbers. Allred engaged external cybersecurity professionals, secured the network, and offered 12 months of credit monitoring through Experian to affected individuals.

City of Cocoa, FL reported an external system breach (hacking) occurring between Feb 8 and Feb 16, 2026, discovered on May 6, 2026. The incident affected 896 individuals, including 1 Maine resident. The breach involved the acquisition of names and personal identifiers. The City provided written notification on June 4, 2026, and offered 12 months of Experian IdentityWorksSM.

Blue Teal Holdings, LLC notified the New Hampshire Attorney General of a data security incident occurring on or about October 13, 2025. Unauthorized access to systems resulted in the exposure of personal information, including names, SSNs, driver's license numbers, and financial account details, affecting approximately 9 New Hampshire residents. Blue Teal engaged external cybersecurity experts, conducted a manual review, and provided affected individuals with 12 months of complimentary credit monitoring.

Maine Attorney General notice for Charles P. Elliott, P.C. regarding an external system breach (hacking) occurring on 09/29/2025 and discovered on 05/14/2026. The incident affected 2 Maine residents. The firm provided written notification and offered 12 months of Kroll credit monitoring.

MPB Property LLC reported an external system breach (hacking) occurring on September 7, 2025, discovered on April 23, 2026. The incident affected 2,042 individuals total, including 1 Maine resident. The breach involved the acquisition of personal identifiers, including government IDs. MPB Property LLC provided written notification and offered 12 months of credit monitoring and identity protection services via Experian.

C.N. Wood Co. Inc. notified the New Hampshire Attorney General of unauthorized network access occurring on August 16, 2025, discovered on May 6, 2026. The incident affected 69 NH residents, exposing names, SSNs, driver's license numbers, and financial account data. C.N. Wood contained the threat, engaged forensic investigators, and offered 12 months of credit monitoring to affected individuals.

New Hampshire Attorney General notification regarding Cardinal Services, Inc. et al. regarding unauthorized access to systems between June 25-26, 2025. Approximately 9 NH residents affected. Data included names, SSNs, and driver's license numbers. Notification sent May 20, 2026, offering credit monitoring.

Nottingham Village notified the New Hampshire Attorney General of a cybersecurity incident affecting one NH resident. Unauthorized access occurred between Nov 8-9, 2025; discovered May 12, 2026. Personal info (name, SSN) was accessed. Nottingham Village secured the network, engaged forensic experts, and offered one year of credit monitoring. Notification sent May 22, 2026.

Parker Lipman LLP notified New Hampshire AG John Formella on May 19, 2026, of a cybersecurity incident affecting two state residents. Unauthorized access occurred between February 10 and March 2, 2026, discovered on March 5, 2026. The breach compromised names, addresses, Social Security numbers, medical records, and bank account/routing numbers. Parker Lipman engaged external cybersecurity professionals and the FBI, and is providing affected residents with one year of complimentary credit monitoring.

Barnhart Crane & Rigging Company, Inc. notified the New Hampshire Attorney General of unauthorized network access occurring April 23-24, 2025. The incident affected approximately 21 New Hampshire residents, exposing names, Social Security numbers, and driver's license numbers. Barnhart engaged forensic investigators, notified residents on May 21, 2026, and provided complimentary credit monitoring services.

Radiology Associates of Richmond (RAR) notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 62 NH residents. Unauthorized access occurred on or about July 25, 2025, and was discovered on April 6, 2026. Compromised data included names, SSNs, DOBs, financial account info, driver's licenses, and PHI. RAR engaged external forensic investigators, contained the threat, and is offering one year of complimentary credit monitoring to affected individuals. Notifications began May 21, 2026.

Sundance Holdings Group, LLC notified the Maryland AG that unauthorized actor access to its network occurred on or about October 11, 2024, discovered December 16, 2024. Impacted data for one Maryland resident potentially included name, DOB, driver's license number, SSN, passport number, green card information, bank account number, and health insurance information. Sundance offered complimentary credit monitoring; notifications began January 6, 2025.

Kotz Sangster Wysocki P.C., a law firm, experienced unauthorized access to its network between Feb 25 and Mar 3, 2024. Discovered Dec 6, 2024 after forensic review. Files containing Social Security numbers, taxpayer ID numbers, and health insurance information may have been removed. Approximately 4 Maryland residents affected. One year complimentary credit monitoring offered via Equifax.

Richard S. Miller, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting 5 NH residents. Unauthorized access occurred between Nov 8 and Dec 3, 2025, exposing driver's license numbers and names/addresses. The company secured its network, engaged forensic investigators, and is offering credit monitoring services.

Johnson, Webbert & Beard, LLP (JWB) notified the New Hampshire Attorney General of a ransomware incident discovered on September 19, 2025. Unauthorized access occurred between September 15 and 19, 2025, potentially exposing personal information, including SSNs and financial account data, of 18 New Hampshire residents. JWB secured its network, engaged forensic investigators, and reported the incident to the FBI. Notifications were sent to affected individuals on May 7, 2026, offering credit monitoring services.

Miller Insurance Protection Team experienced an external system breach (hacking) on 12/03/2025, discovered on 04/10/2026. The incident affected 2 Maine residents. The entity, represented by McDonald Hopkins, provided written notification and offered 12 months of complimentary identity monitoring through Kroll.

Berger & Williams, LLP, a law firm, notified the New Hampshire Attorney General of unauthorized access to an employee email account affecting approximately 8 NH residents. The breach occurred around February 6, 2025, and was discovered on April 6, 2026. Personal information, including names and Social Security numbers, was accessed. Notifications were sent on May 4, 2026, offering one year of credit monitoring and fraud insurance.

GrayRobinson, P.A., a law firm, notified the New Hampshire Attorney General that an unauthorized actor accessed its network between March 5 and March 24, 2025. GrayRobinson discovered the breach on April 13, 2026, after a forensic investigation. The incident potentially exposed personal information, including names, DOBs, SSNs, driver's license numbers, financial account info, and medical data, for 41 New Hampshire residents. GrayRobinson reported the incident to law enforcement, engaged external cybersecurity professionals, and is offering one year of complimentary credit monitoring to affected residents.

Berger & Williams, LLP (a San Diego law firm) reported a data breach to the Maine Attorney General via outside counsel McDonald Hopkins. The breach occurred on 02/06/2025 and affected 34,153 individuals total, including 3 Maine residents. The notice description was 'Other' and the information acquired field was left blank in the Maine portal entry; however, the linked notification letter is titled 'Letter_A_Adult_SSN_Final_v3_Redacted.pdf', strongly suggesting Social Security Numbers were among the affected data elements. Consumer notifications were sent electronically on 05/04/2025, and 12 months of identity theft and credit monitoring through TransUnion was offered. The discovery date listed ('04-06-2026') appears to be a data-entry error in the source filing.

Empire Express, a Memphis, TN-based commercial entity (likely transportation/logistics), reported an external system breach (hacking) to the Maine Attorney General. The breach occurred on or around 06/27/2025 and was discovered on 04/13/2026 — a notable ~9.5 month delayed-discovery gap. A total of 5,438 persons were affected nationwide, including 2 Maine residents. Written notifications were sent on 05/05/2026, and 12 months of Kroll identity theft protection and credit monitoring was offered. The 'Information Acquired' field was left blank in the filing, so specific data types compromised are not disclosed in this Maine AG submission (the linked notice PDF was not retrieved).