HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
BOMCO, INC.
bd_04a02396cf2c4115 · schema v1 · pii pii-v1
Full breach record for BOMCO, INC. →Bomco, Inc. notified the New Hampshire Attorney General of a data event affecting 23 NH residents. Unauthorized access occurred June 14-16, 2025; discovered June 17, 2025. Impacted data included names, SSNs, driver's licenses, and financial account info. No fraudulent misuse reported. Remediation included credit monitoring via IDX and enhanced security protocols.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3c62ce5a1eb1f179Indiana State AGfiled 2026-05-18Candidate
- bd_90c385bf23f3e3e1Vermont State AGfiled 2026-05-18Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bomco-20260518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2026
- Raw hash
- 1fb8add84bb501fd968889da809c0a9059a42dce5ac7abae469db4a33bf653be
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- BOMCO, INC.norm: bomco
- Domain
- bomco.com
Incident
- Discovered
- Jun 17, 2025
- Materiality determined
- —
- Notification sent
- May 18, 2026
- Affected individuals
- 23
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- providing written notice of this incident to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 48 weeks(335 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.