Commonwealth Trust Company notified the NH AG of a data event affecting 4 NH residents. An unauthorized actor accessed an employee email account on May 13, 2025, likely via phishing, obtaining emails containing names, SSNs, financial account info, and PHI. CTC secured the account, investigated, and provided 24 months of credit monitoring to affected individuals.
Affected (this filing): 4