HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
North Metro Harness Initiative
bd_17acf71d5a8be678 · schema v1 · pii pii-v1
Full breach record for North Metro Harness Initiative →North Metro Harness Initiative LLC dba Running Aces notified the NH Attorney General of a data security incident occurring between July 27 and August 14, 2025, detected on August 12, 2025. The breach impacted 3 New Hampshire residents, exposing names, SSNs, DOBs, and driver's license numbers. The company engaged third-party experts, notified law enforcement, and provided 12 months of credit monitoring via Experian.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_01651db588c31fd1Maine State AGfiled 2025-12-21(1d gap)Verified
- bd_d0e5768b81bad1d7Indiana State AGfiled 2025-12-19(3d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/north-metro-harness-initiative-running-aces-20251222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2025
- Raw hash
- 2eb38f0757b711c9c402c6b4864f27d4b00d55dec4334a214fec816c147e493a
Reporting entity
- Name
- North Metro Harness Initiativenorm: north metro harness initiative
Victim entity
- Name
- North Metro Harness Initiativenorm: north metro harness initiative
Incident
- Discovered
- Aug 12, 2025
- Materiality determined
- —
- Notification sent
- Dec 19, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified NH Department of Justice
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 19 weeks(132 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.