HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Earthbound Holding LLC
bd_10189dba222d0f90 · schema v1 · pii pii-v1
Full breach record for Earthbound Holding LLC →Earthbound Holding, LLC, a Texas-based retailer, notified the New Hampshire Attorney General of a data security incident discovered on December 18, 2025. Unauthorized access resulted in the acquisition of personal information for 26 New Hampshire residents, specifically names combined with Social Security numbers. Earthbound retained cybersecurity experts, reported the incident to the FBI, and mailed notifications to affected individuals on March 12, 2026, offering 12 months of identity protection services.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7181d53619a11c41Vermont State AGfiled 2026-03-12(1d gap)Verified
- bd_7317411df11b9522Maine State AGfiled 2026-03-12(1d gap)Candidate
- bd_ebe90cc16b1f983cIndiana State AGfiled 2026-03-12(1d gap)Verified
- bd_4640a5b77b35046eTexas State AGfiled 2026-03-16(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/earthbound-holding-20260313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2026
- Raw hash
- 86a9cd5ddd0d212c11a47c4aa79847cffd849270e6509b01a5e8d87cbf40650b
Reporting entity
- Name
- Earthbound Holding LLCnorm: earthbound holding
Victim entity
- Name
- Earthbound Holding LLCnorm: earthbound holding
Incident
- Discovered
- Dec 18, 2025
- Materiality determined
- —
- Notification sent
- Mar 12, 2026
- Affected individuals
- 26
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to the FBI
Compliance
- Time to disclose
- 12 weeks(85 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.