HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained

Electrocraft

bd_23cc7a572018670a · schema v1 · pii pii-v1

ElectroCraft, Inc. notified the New Hampshire Attorney General of a data event affecting 3 state residents. Unauthorized access occurred between Jan 10-12, 2025. Data exposed included names, SSNs, driver's licenses, and financial account info. The company engaged third-party specialists, notified law enforcement, and provided 12 months of credit monitoring.

Leak gap clock⏱ Leak >90d28 weeks discovery → filing

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

A leak claim by cactus about this victim predates this filing by 176 days.View originating leak claim

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/electrocraft-20250725.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 25, 2025
Raw hash: 8e082e5f960d851c319179adbd79f2bafdf4cac152d05cefae7434251197b805

Reporting entity

Name: Electrocraft
norm: electrocraft
Domain: electrocraft.com

Victim entity

Name: Electrocraft
norm: electrocraft
Domain: electrocraft.com

Incident

Discovered: Jan 12, 2025
Materiality determined: May 22, 2025
Notification sent: Jul 25, 2025
Affected individuals: 3
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcement
Initial access: valid_credentials

Compliance

Time to disclose: 28 weeks(194 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.