Davies, McFarland & Carroll LLC

Davies, McFarland & Carroll LLC (DMC), a law firm, notified the New Hampshire Attorney General of a cybersecurity incident affecting approximately 6 NH residents. Unauthorized access to DMC's internal network occurred between May 19-22, 2025. Personal information potentially accessed included names, DOBs, driver's licenses, financial account numbers, and SSNs. DMC engaged cybersecurity experts, contained the breach, and provided 12 months of credit monitoring to affected individuals. Notification letters were sent on November 24, 2025.

HHS OCR breach portal entry: Davies, McFarland & Carroll LLC (PA), a Business Associate, reported a Hacking/IT Incident affecting a Network Server on 2025-11-24. Reported individuals affected: 54,712. No narrative description was provided in the portal row; specifics of the intrusion vector, threat actor, and data types beyond PHI are not disclosed in this source.

Davies, McFarland & Carroll LLC reported an external system breach (hacking) occurring on May 19, 2025, discovered on May 22, 2025. The incident affected 54,712 individuals, including 4 Maine residents. Personal information, including names and government identifiers, was compromised. The firm notified affected individuals electronically on November 24, 2025, and offered TransUnion Cyberscout identity theft protection services.

Davies, McFarland & Carroll.