Hardin, Kundla, McKeon, & Poletto

Hardin, Kundla, McKeon, & Poletto, P.C. based in Springfield, New Jersey, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-03-31 and reported on 2025-05-30. 355 Texas residents were affected. 12,063 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Date of Birth. Consumers were notified via U.S. Mail.

Hardin, Kundla, McKeon & Poet to P.C. reported a data security incident involving a malicious encryption attack (ransomware) occurring in or around January 2024. The incident affected approximately 12,063 individuals nationwide, including 26 Nebraska residents. Compromised data included names, DOBs, SSNs, driver's licenses, medical/insurance info, and financial account numbers. The firm engaged cybersecurity experts, implemented safeguards, and offered complimentary identity protection services via TransUnion/Cyberscout. No evidence of misuse was found as of May 2025.

Hardin, Kundla, McKeon & Poletto, P.C. notified consumers of a data security incident involving a malicious encryption attack in January 2024. The incident resulted in unauthorized copying of files containing names and Social Security numbers. Approximately 12,063 individuals were notified. The firm engaged cybersecurity experts and is offering complimentary identity protection services.

Hardin Kundla McKeon & Poletto PC reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-08 and was reported on 2025-05-29. 53 Indiana residents were affected. 12,063 individuals affected in total.

Hardin, Kundla, McKeon, & Poletto reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-29. 46 Massachusetts residents were affected.

Hardin, Kundla, McKeon, & Poletto, P.C. reported an external system breach (hacking) occurring in January 2024, discovered March 31, 2025. The incident involved a malicious encryption attack and unauthorized data acquisition affecting 12,063 individuals, including 8 Maine residents. Compromised data included names, DOBs, SSNs, driver's licenses, medical/insurance info, and financial accounts. The firm engaged cybersecurity experts, secured its network, and offered 12 months of identity protection services.

Hardin, Kundla, McKeon & Poletto P.C. notified the NH Attorney General that unauthorized acquisition of personal information occurred in or around January 2024. The firm discovered suspicious activity and engaged independent cybersecurity experts. A comprehensive data review concluded on March 31, 2025. Nine New Hampshire residents were notified via mail on May 29, 2025. The affected data includes personal information, likely including names and potentially SSNs given the identity theft advice provided, though specific fields are redacted in the filing. No evidence of misuse was found.