Harvey & Martin, PLLC, an accounting firm, reported a ransomware event on November 27, 2025, which encrypted files. In February 2026, IRS e-file rejections triggered an investigation revealing data exfiltration. The breach affected 24 New Hampshire residents, exposing names, SSNs, and bank account numbers. The firm restored data from backups, engaged cybersecurity experts, reset passwords, implemented MFA, and provided 24 months of credit monitoring to affected individuals. The incident was contained, and no ransom was paid.
Affected (this filing): 24