HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Monterey Mushrooms, Inc.
bd_17acbf087b19cf7a · schema v1 · pii pii-v1
Full breach record for Monterey Mushrooms, Inc. →Monterey Mushrooms, LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting one NH resident. Unauthorized access occurred between August 2-7, 2025. Data involved name, SSN, and potentially driver's license/passport numbers. Notification sent September 18, 2025, with credit monitoring offered.
Leak gap clock⏱ Leak >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 42 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fdc024fa12b201d0Indiana State AGfiled 2025-09-18Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/monterey-mushrooms-20250918.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 18, 2025
- Raw hash
- 5f02ddc588e91e5a52c57ed1855fbd771965960dc49dab8d2db99c1ece6e08fa
Reporting entity
- Name
- Monterey Mushrooms, Inc.norm: monterey mushrooms
- Domain
- montereymushrooms.com
Victim entity
- Name
- Monterey Mushrooms, Inc.norm: monterey mushrooms
- Domain
- montereymushrooms.com
Incident
- Discovered
- Aug 2, 2025
- Materiality determined
- —
- Notification sent
- Sep 18, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(47 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.