HackingData ExfiltratedCustomer Data InvolvedGovernment IDMediumContained

Upstaging, Inc.

bd_106bdd27cdea57b1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 2, 2026

Filed

Aug 5, 2026

To disclose

9 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Upstaging, Inc. →

Upstaging, Inc. experienced unauthorized access to its network environment between May 28, 2026, and June 2, 2026. The company discovered unusual activity on June 2, 2026. An investigation revealed that certain information, including Social Security numbers, may have been copied by an unauthorized individual. One New Hampshire resident was affected. Upstaging engaged forensic specialists, retained legal counsel, and offered 12 months of complimentary credit monitoring and identity theft restoration services to affected individuals. Notification letters were mailed on August 5, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 9 weeks / 64 days

May 28, 2026

Begins

Jun 2, 2026

Discovered

Aug 5, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebooba_projectbd_055a08957f5755c02026-07-06 · +30dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_9d7d9e4bd9098af52026-08-05Candidate
Nebraska State AGbd_bc210654b238d2912026-08-05Verified
Massachusetts State AGbd_51fbb723f6b741872025-11-11 · +267dVerified by operator

Name: Upstaging, Inc.
norm: upstaging
Domain: wilsonelser.com

Name: Upstaging, Inc.
norm: upstaging
Domain: upstaging.com

Discovered: Jun 2, 2026
Breach occurred: May 28, 2026 – Jun 2, 2026
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 5, 2026
Affected individuals: 1state-resident count only
Data types: Government ID
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Retained legal counsel and third-party forensic specialists to investigate the unusual activity
Engaged a specialized cybersecurity firm to conduct a forensic investigation to determine the nature and scope of the Event
Informed its law firm and began identifying the affected individuals in preparation for notice
Offered at least 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout/TransUnion to all individuals
Changes made: Provided guidance on how to better protect against identity theft and fraud, including providing information on how to place a fraud alert and security freeze on one’s credit file
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 11 · first

Massachusetts State AG+267d

Nebraska State AG+267d

New Hampshire State AG+267d · this page

Pattern: first filing Nov 11 (MA), last Aug 5 (NH) — a 267-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/upstaging-20260805.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 5, 2026
Raw hash: 694837c5f0e758514f46c8608b7e3d2a942a68f9116b20305db35ca00596add8

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityUpstaging, Inc.

Victim entityUpstaging, Inc.

Incidentdiscovered Jun 2, 2026

Stated responseRetained legal counsel and third-party forensic specialists to investigate the unusual activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov