HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Boston Capital Holdings LP
bd_0f1ccf31ebc47b7f · schema v1 · pii pii-v1
Full breach record for Boston Capital Holdings LP →Boston Capital Holdings LP notified the New Hampshire Attorney General on May 18, 2026, of a data event affecting 112 NH residents. Unauthorized access occurred Jan 16-22, 2026, via a sophisticated actor exploiting third-party cloud systems to gain access. Data involved names and Social Security numbers. The company notified law enforcement, provided 12 months of credit monitoring, and notified consumer reporting agencies.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_22628c792696357dVermont State AGfiled 2026-05-18Verified
- bd_2e06c1f7553bb4caIndiana State AGfiled 2026-05-18Verified
- bd_7b5266914026165fMaine State AGfiled 2026-05-18Verified by operator
- bd_966984c8bec10ad5Oregon State AGfiled 2026-05-18Verified by operator
Show 3 more filings ↓Show fewer ↑up to 17d gap
- bd_cdd5e07e39628f06California State AGfiled 2026-05-18Verified by operator
- bd_2e07299b6adc2434Texas State AGfiled 2026-05-19(1d gap)Verified by operator
- bd_d48a16fe689f76b0Massachusetts State AGfiled 2026-05-01(17d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/boston-capital-holdings-20260518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 18, 2026
- Raw hash
- 755fc1eb1273b73761b59cce0ea231097d34eb578ff719b7426c544dd6cbe2b9
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Boston Capital Holdings LPnorm: boston capital
- Domain
- bostoncapital.com
Incident
- Discovered
- Feb 12, 2026
- Materiality determined
- May 18, 2026
- Notification sent
- May 18, 2026
- Affected individuals
- 112
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- supply_chain
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.