HackingManufacturingManufacturingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

ROLAND MACHINERY COMPANY

bd_06308f31a604206e · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 29, 2026

Filed

Jul 15, 2026

To disclose

7 weeks

Affected

4state residents only

Linked

7 filings

Confidence

66%

Full breach record for ROLAND MACHINERY COMPANY →

Roland Machinery Company notified the NH Attorney General of a data security incident where an unauthorized third party accessed systems on May 28-29, 2026, and exfiltrated data confirmed on June 9, 2026. The incident potentially affected 4 New Hampshire residents, exposing names, SSNs, driver's licenses, and financial account information. The company contained the incident, engaged forensic specialists, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d7 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 7 weeks / 47 days

May 28, 2026

Begins

May 29, 2026

Discovered

Jul 15, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by termite about this victim predates this filing by 37 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitetermitebd_2c66e39033a058a52026-06-08 · +37dVerified by operator

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_8d84f688fd9949872026-07-08 · +7dVerified
Nebraska State AGbd_e64f073b020a32272026-07-08 · +7dVerified
Vermont State AGbd_76254b0a419c6a9e2026-07-07 · +8dVerified
Massachusetts State AGbd_f1adee0cd1a91e5a2026-07-07 · +8dVerified

Show 1 more filing ↓up to 14d gap

Illinois State AGbd_b8b5511262f010ae2026-07-01 · +14dCandidate

Name: ROLAND MACHINERY COMPANY
norm: roland machinery
Domain: rolandmachinery.com

Name: ROLAND MACHINERY COMPANY
norm: roland machinery
Domain: rolandmachinery.com
Industry: Manufacturingllm

Discovered: May 29, 2026
Breach occurred: May 28, 2026 – May 29, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 8, 2026
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Attorney General of New Hampshire

During the incident: Immediately contained the incident
Initiated incident response procedures
Secured affected systems
Engaged independent cybersecurity specialists for forensic investigation
Notified law enforcement
Changes made: Taken a number of technical and administrative steps to further enhance the security of its systems and its customer data
Offering New Hampshire residents twelve (12) months of complimentary credit monitoring services through IDX and ninety (90) days of access to a call center
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Illinois State AGJul 1 · first

Vermont State AG+6d

Massachusetts State AG+6d

New Hampshire State AG+7d

Nebraska State AG+7d

New Hampshire State AG+14d · this page

Pattern: first filing Jul 1 (IL), last Jul 15 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/roland-machinery-20260715.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2026
Raw hash: 368462240192f00d966ba4dee512eb518467bd8aae69fc5730a0ae61700a02e7

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityROLAND MACHINERY COMPANY

Victim entityROLAND MACHINERY COMPANY

Incidentdiscovered May 29, 2026

Stated responseImmediately contained the incident

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov