Tonneson & Company, PC notified the NH Attorney General of a data security incident involving its third-party payroll vendor, Paycor. The incident stemmed from a MOVEit zero-day vulnerability exploited by attackers. Tonneson learned in December 2023 that employee data was impacted. Written notice was sent on April 25, 2024, to 12 New Hampshire residents, offering credit monitoring and identity protection services.
Affected (this filing): 12