HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
BMS HOLDINGS III CORP.
bd_0564395ec81c4afc · schema v1 · pii pii-v1
Full breach record for BMS HOLDINGS III CORP. →BMS Holdings, LP notified the New Hampshire AG of a data event affecting 28 residents. Unauthorized access occurred Feb 5-24, 2025, involving copying of files containing names, SSNs, and driver's license numbers. BMS detected suspicious activity on Feb 24, 2025, and provided credit monitoring services to affected individuals.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2eea22c4026b14c6Indiana State AGfiled 2025-06-23Verified
- bd_8ec0e44091ebee77California State AGfiled 2025-06-23Verified
- bd_9e1cde324f44f781Vermont State AGfiled 2025-06-23Verified
- bd_eb67f220381d7775Montana State AGfiled 2025-06-23Candidate
Show 1 more filing ↓Show fewer ↑up to 7d gap
- bd_0b1e7eb0d279c6a9Texas State AGfiled 2025-06-30(7d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bms-holdings-20250623.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 23, 2025
- Raw hash
- 9ef8ff47c597e8372d70c4a3f5048648a45778121beb4ec583022725bcdfbf2b
Reporting entity
- Name
- BMS HOLDINGS III CORP.norm: bms holdings iii
Victim entity
- Name
- BMS HOLDINGS III CORP.norm: bms holdings iii
Incident
- Discovered
- Feb 24, 2025
- Materiality determined
- Apr 28, 2025
- Notification sent
- Jun 23, 2025
- Affected individuals
- 28
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Office of the New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.