MCLANE MIDDLETON, PROFESSIONAL ASSOCIATION

Quality Carton & Converting, LLC, a New Hampshire-based manufacturer, reported a ransomware incident involving the Akira group. Discovered on February 10, 2026, the breach resulted in the exfiltration of employee and client PII, including SSNs and financial account data. Approximately 29 New Hampshire residents were affected. QCC engaged forensic specialists, notified law enforcement, and provided 24 months of credit monitoring via Experian. The incident status is contained.

Counseling Associates of New London, PLLC (a NH-based healthcare provider) reported a data breach to the Maine AG. The breach occurred on and was discovered on 03/25/2024, and notifications were sent electronically on 04/25/2024. A total of 102 persons were affected, including 1 Maine resident. The filing categorized the breach as 'Other' without specifying the attack vector or data types. Affected individuals were offered 2 years of IDX 1-bureau identity theft protection and credit monitoring.

The Town of Middleton, New Hampshire, experienced a data security incident affecting 43 residents. The breach involved unauthorized access to town systems, likely via compromised credentials. The town notified the New Hampshire Attorney General's office via McLane Middleton, P.A. on May 25, 2022. No specific data types beyond general PII were detailed, and no financial impact was disclosed.

McLane Middleton, a professional services firm, reported a data breach affecting 15 Maine residents. The breach, which occurred and was discovered on August 17, 2020, was described as an external system breach or hacking incident. The compromised information included names or other personal identifiers in combination with Social Security Numbers. Affected individuals were notified on December 8, 2020, and offered 24 months of 3-bureau credit monitoring services.

Proctor Academy, an educational institution, reported an external system breach that occurred on June 1, 2020, and was discovered on September 29, 2020. The breach affected 691 individuals, compromising names and Social Security Numbers. Affected individuals were notified on November 7, 2020, and offered identity theft protection services.