HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
The Alcohol & Drug Testing Service
bd_1c65f70955be2f75 · schema v1 · pii pii-v1
Full breach record for The Alcohol & Drug Testing Service →The Alcohol & Drug Testing Services (TADTS) notified the New Hampshire Attorney General of a cybersecurity incident discovered on July 9, 2024. An unauthorized actor downloaded personal information, including names, of three New Hampshire residents. TADTS contained the incident, notified federal law enforcement, reset passwords, and engaged privacy professionals. Notification to affected individuals was sent on July 17, 2025.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_01a2fb67a87c9b5dTexas State AGfiled 2025-07-18(3d gap)Verified
- bd_032ba889daf3b6dfVermont State AGfiled 2025-07-17(4d gap)Verified
- bd_70bb2c27a097250bIndiana State AGfiled 2025-07-17(4d gap)Verified
- bd_a43501eb14f849b3Maine State AGfiled 2025-07-17(4d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/alcohol-drug-testing-20250721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2025
- Raw hash
- 736d8946a12c6bfd0c06a447a68ca61dfbf63fe19dc64bd77019ba28ec2fc9f5
Reporting entity
- Name
- The Alcohol & Drug Testing Servicenorm: the alcohol drug testing service
Victim entity
- Name
- The Alcohol & Drug Testing Servicenorm: the alcohol drug testing service
Incident
- Discovered
- Jul 9, 2024
- Materiality determined
- —
- Notification sent
- Jul 17, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this matter to federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 months(377 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.