Lumara Bio USA, Inc.
bd_1ffa59c32a8d3e3e · schema v1 · pii pii-v2
Full breach record for Lumara Bio USA, Inc. →Lumara Bio USA, Inc. notified the NH Attorney General of unauthorized access to personal information of one New Hampshire resident. The incident occurred on or around September 12, 2026, when the parent company ITM became aware of a cyber-attack on its systems. Affected data included names, addresses, dates of birth, Social Security numbers, driver's license numbers, and employment information. Lumara Bio USA took systems offline, engaged cybersecurity experts, and provided 24 months of identity theft protection to the affected individual.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 12, 2026
Discovered
Oct 26, 2026
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- Massachusetts State AGbd_7ee238bec5eefb5f2026-10-01 · +25dCandidate
Filing propagation · 2 filings · 2 states
View merged incident ↗Pattern: first filing Oct 1 (MA), last Oct 26 (NH) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.