MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Beach Properties
bd_0d756c965855eb42 · schema v1 · pii pii-v1
Full breach record for Beach Properties →Beach Properties d/b/a Basin Harbor Resort reported a ransomware attack to the New Hampshire Attorney General on April 21, 2026. The incident, discovered on October 20, 2025, involved unauthorized access to network data affecting 40 New Hampshire residents. Personal information exposed included names, Social Security numbers, driver's license numbers, government IDs, and passport numbers. The resort engaged forensic investigators, secured its network, and notified affected individuals, offering 12 months of credit monitoring through TransUnion.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_047d84a63ff83478Maine State AGfiled 2026-04-21Verified
- bd_83680b8d3cfa5fa2Vermont State AGfiled 2026-04-22(1d gap)Verified
- bd_11044d5332cedf1dIndiana State AGfiled 2026-04-20(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/beach-properties-basin-harbor-resort-20260421.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 21, 2026
- Raw hash
- 8c9af7b51b0e30445fc977f7433111f3d6a6f154f9549b25c58310d497ea6aad
Reporting entity
- Name
- Beach Propertiesnorm: beach properties
Victim entity
- Name
- Beach Propertiesnorm: beach properties
Incident
- Discovered
- Oct 20, 2025
- Materiality determined
- —
- Notification sent
- Apr 20, 2026
- Affected individuals
- 40
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.