HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMediumContained

KDM SIGNS, LLC

bd_14a6b6249526ebd5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 12, 2026

Filed

May 29, 2026

To disclose

11 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for KDM SIGNS, LLC →

KDM Signs, a Cincinnati-based signage company, notified the New Hampshire Attorney General of a data security event affecting one New Hampshire resident. The incident involved unauthorized access to systems on or about March 11, 2026, resulting in the exposure of the resident's name and Social Security number. KDM engaged cybersecurity specialists, notified the individual, and provided 12 months of credit monitoring services through TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 11 weeks / 78 days

Mar 11, 2026

Begins

Mar 12, 2026

Discovered

May 29, 2026

Filed

vs. sector median

+4 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_ac8192035ad3d1f52026-05-29Candidate
Massachusetts State AGbd_d12e0f8802da00b42026-05-30 · +1dVerified

Name: KDM SIGNS, LLC
norm: kdm signs

Name: KDM SIGNS, LLC
norm: kdm signs
Industry: Retail & Consumerllm

Discovered: Mar 12, 2026
Breach occurred: Mar 11, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: May 29, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Engaged independent cybersecurity specialists to investigate
Notified the identified individuals
Established a call center to answer questions
Provided information on how to place a fraud alert and credit freeze
Provided information on how to obtain a free credit report
Encouraged contact with the Federal Trade Commission, state Attorney General, and law enforcement
Offered 12 months of credit monitoring and identity theft services through TransUnion/Cyberscout
Changes made: Implemented additional measures designed to reduce the risk of a similar event occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(78 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMay 29 · first

New Hampshire State AGMay 29 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kdm-signs-20260529.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2026
Raw hash: 69c8e373c8cc3945354299b1d648ed3897639a6ffa8d3186de1f2913cb8b43b2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityKDM SIGNS, LLC

Victim entityKDM SIGNS, LLC

Incidentdiscovered Mar 12, 2026

Stated responseEngaged independent cybersecurity specialists to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov