HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
JCI Jones Chemicals Inc.
bd_0eaa5df10ae37224 · schema v1 · pii pii-v1
Full breach record for JCI Jones Chemicals Inc. →JCI Jones Chemicals, Inc. reported a data security incident to the New Hampshire Attorney General on July 1, 2025. On June 9, 2025, JCI was alerted that a cybercriminal gained unauthorized access to a third-party vendor's systems. The vendor maintained files containing personal information for 44 New Hampshire residents, including names, addresses, SSNs, driver's license numbers, limited medical information, and bank account details. JCI engaged a forensic security firm, notified affected residents, and offered two years of complimentary credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4ecd781f0eb20bd3Indiana State AGfiled 2025-07-01Verified
- bd_a25903cda84c19bfMaine State AGfiled 2025-07-01Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/jci-jones-chemicals-20250701.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2025
- Raw hash
- 10e1960c4169489da0173df906303d97606b3f9139ecbb55d355f5b8b91f2fa6
Reporting entity
- Name
- JCI Jones Chemicals Inc.norm: jci jones chemicals
Victim entity
- Name
- JCI Jones Chemicals Inc.norm: jci jones chemicals
Incident
- Discovered
- Jun 9, 2025
- Materiality determined
- Jun 20, 2025
- Notification sent
- Jul 1, 2025
- Affected individuals
- 44
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Office of the Attorney General of the State of New Hampshire
- Initial access
- supply_chain
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.