Social EngineeringFinancial ServicesFinanceBECStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountLowContained

LIA Insurance Administrators, Inc.

bd_0828db2b08b256ad · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 7, 2026

Filed

Jul 17, 2026

To disclose

10 days

Affected

13state residents only

Linked

3 filings

Confidence

65%

Full breach record for LIA Insurance Administrators, Inc. →

LIA Insurance Administrators, Inc. experienced a business email compromise incident resulting in unauthorized access to email accounts. Data potentially accessed on July 21, 2025, included names and bank routing/account numbers for 13 New Hampshire residents. The company discovered the involvement of personal information on July 7, 2026, after forensic investigation. Notifications were sent starting July 10, 2026. Complimentary credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 351 days

discovery → filing · 10 days

Jul 21, 2025

Begins

Jul 7, 2026

Discovered

Jul 17, 2026

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_3d67c42e68e0820a2026-07-14 · +3dVerified
Vermont State AGbd_f1b8c55f5add1ed12026-07-11 · +6dCandidate

Name: LIA Insurance Administrators, Inc.
norm: lia insurance administrators

Name: LIA Insurance Administrators, Inc.
norm: lia insurance administrators
Industry: Financial Servicesllm

Discovered: Jul 7, 2026
Breach occurred: Jul 21, 2025
Undetected for: 351 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2026
Affected individuals: 13state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1566 PhishingT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Immediately took steps to remediate the incident
Commenced a thorough investigation
Engaged forensic experts to investigate the incident
Conducted a manual review of the impacted emails
Providing the affected residents with written notification of this incident
Advising the affected residents about the process for placing fraud alerts and/or security freezes on their credit files
Providing the affected residents with the contact information for the consumer reporting agencies and the Federal Trade Commission
Offering complimentary membership of Epiq - Privacy Solutions ID
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 days(10 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGJul 11 · first

Massachusetts State AG+3d

New Hampshire State AG+6d · this page

Pattern: first filing Jul 11 (VT), last Jul 17 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lia-insurance-administrators-20260717.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2026
Raw hash: 24cbd692347992c3e19bb6a18c237707462d4d653db9682610b89619fea5d6e8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityLIA Insurance Administrators, Inc.

Victim entityLIA Insurance Administrators, Inc.

Incidentdiscovered Jul 7, 2026

Stated responseImmediately took steps to remediate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov