HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Fedcap

bd_179553b10a65a158 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 22, 2026

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Fedcap →3 incidents on file

The Fedcap Group, Inc. notified Massachusetts residents of a cybersecurity incident involving unauthorized access to personal information. The breach exposed names, Social Security numbers, dates of birth, and driver's license numbers. The company engaged law enforcement, reviewed security policies, and offered 24 months of complimentary credit monitoring and identity restoration through Experian. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Jun 22, 2026

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 4 about the same incident.View merged incident

A leak claim by ransomhouse about this victim predates this filing by 194 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhousebd_6516fe3b92622ad72025-12-10 · +194dVerified by operator

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_2a0a2468b4a6ec2a2026-06-22Verified
Vermont State AGbd_2e3c9c04fe0b170f2026-06-22Verified

Name: Fedcap
norm: fedcap
Domain: fedcap.org

Name: Fedcap
norm: fedcap
Domain: fedcap.org
Industry: Professional Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jun 18, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1114 Email Collection
Threat actor: External

During the incident: Took steps to investigate and respond
Contacted law enforcement
Reviewed the potentially impacted information
Reviewed security policies and enhanced procedures
Offered twenty-four (24) months of complimentary access to credit monitoring services through Experian
Changes made: Reviewed security policies and enhanced procedures to reduce the risk of similar future events
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGJun 22 · first

Vermont State AGJun 22 · first

Massachusetts State AGJun 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1011-the-fedcap-group-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 22, 2026
Raw hash: 71fb010d6f081382b074604b0fd7806eb40d1753be75a56d95f171cd37b651f3

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityFedcap

Victim entityFedcap

IncidentUnknown

Stated responseTook steps to investigate and respond

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov