Karr & Boucher Data Breach Lawsuit Investigation

Breach Timeline

• August 12 2025 — Firm discovered a potential business email compromise and secured the affected account.
• December 4 2025 — Third-party forensic investigation concluded that an unauthorized actor may have accessed sensitive data.
• December 9 2025 — Detailed review of impacted emails/files completed; personal information confirmed at risk.
• January 6 2026 — Consumer notification letters mailed.
• January 7 2026 — Breach reported to the Maine Attorney General.

What Information Was Involved?

The forensic review indicates the following data may have been accessed:

• First and last name
• Last four digits of Social Security number
• QuickBooks username and password
• Citizens Bank username and password
• Bank statements
• Credit card number, including CVV

Remedial Actions by Karr & Boucher

Since discovery, the firm reports that it:

• Secured the compromised email account.
• Engaged an independent cybersecurity firm for a forensic investigation.
• Enhanced technical security measures and internal procedures to reduce future risk.
• Is offering complimentary Single-Bureau Credit Monitoring, Credit Report, and Credit Score services through Kroll for 12 months.

Steps You Can Take Now

If you received the breach letter, Karr & Boucher urges you to:

1. Enroll in the free Kroll credit-monitoring service within 90 days at bfs.cyberscout.com/activate using your unique code.
2. Monitor bank, credit-card, and QuickBooks accounts for unfamiliar activity.
3. Review your credit reports and place fraud alerts or security freezes if necessary.
4. Contact the firm’s dedicated call center at 1-800-405-6108 (Mon–Fri, 8 a.m.–8 p.m. ET) with questions.

Company Overview

Karr & Boucher, P.L.L.C. (“Karr & Boucher”) is an accounting firm headquartered in Manchester, New Hampshire.

• Website: karrboucher.com
• Contact: karrboucher.com/contact-us
• Address: 16 Salmon St, Suite 3, Manchester, NH 03104, USA
• Industry: Accounting
• Founded: 1989

Frequently Asked Questions

I received a data breach letter from Karr & Boucher — what should I do?

Follow the enrollment instructions for the free Kroll credit-monitoring service within 90 days, monitor your accounts, and consider speaking with a data-breach attorney about your legal options.

What information did the Karr & Boucher breach expose?

Potentially exposed data includes names, last four digits of SSN, bank and QuickBooks credentials, bank statements, and credit-card information with CVV.

Did Karr & Boucher offer credit monitoring, and for how long?

Yes. The firm is providing Single-Bureau Credit Monitoring, Credit Report, and Credit Score services through Kroll for 12 months at no cost to affected individuals.

How do I enroll in the Karr & Boucher credit monitoring service?

Visit bfs.cyberscout.com/activate, enter your unique code, and complete the verification steps within 90 days of receiving your letter.

How many people were affected by the Karr & Boucher data breach?

The firm has not disclosed the total number of impacted individuals in its public filing.

Am I eligible to join a lawsuit against Karr & Boucher?

If your data was compromised, you may have legal rights to compensation for time and losses. Consult a qualified data-breach attorney to evaluate your claim.

How can I get the official breach notice (PDF) for Karr & Boucher?

You can download the notice directly from the Maine Attorney General’s website using the button above or this link.