MalwareTechnologyInformationRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

BTU International, Inc.

bd_23f41b168cb4d6a9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 26, 2025

To disclose

—

Affected

81state residents only

Linked

5 filings

Confidence

66%

Full breach record for BTU International, Inc. →2 incidents on file

BTU International experienced a ransomware attack on or around August 11, 2025, resulting in unauthorized access to its IT systems. The incident affected 81 New Hampshire residents. Personal information accessed may include names, Social Security numbers, driver's license numbers, and financial account numbers with access information. BTU notified the FBI, engaged cybersecurity specialists, and is offering one year of complimentary credit monitoring through Cyberscout. Notices were sent on December 26, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 11, 2025

Begins

Dec 26, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_141b7d5af22bce832025-12-26Candidate
Vermont State AGbd_48859c292fd5840a2025-12-26Verified
Nebraska State AGbd_e116cfbf966052362025-12-26Verified
Massachusetts State AGbd_0feb732ba449ac292025-12-27 · +1dVerified

Name: BTU International, Inc.
norm: btu international

Name: BTU International, Inc.
norm: btu international
Industry: Technologyllm

Discovered: —
Breach occurred: Aug 11, 2025
Materiality determined: —
Notification sent: Dec 26, 2025
Affected individuals: 81state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Attorney GeneralNotified U.S. federal law enforcement, including the Federal Bureau of Investigation (FBI)

During the incident: Took protective actions to stop the unauthorized access
Notified U.S. federal law enforcement, including the Federal Bureau of Investigation (FBI)
Assessed the security of our network and systems
Launched an investigation with the assistance of leading cybersecurity specialists
Installed monitoring devices on our IT systems to detect suspicious activity
Changes made: Working to implement additional safeguards
Providing one (1) year of complimentary credit protection and monitoring services through Cyberscout at no cost to the individuals
Evaluate and deploy the level of robust security protocols, continuous monitoring, and staff training needed to prevent and defend against sophisticated cybersecurity threats
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 26 · first

Vermont State AGDec 26 · first

Nebraska State AGDec 26 · first

New Hampshire State AGDec 26 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/btu-international-20251226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 26, 2025
Raw hash: 00c0653798d7bd0ef460be0b3bbbb0df06d19c16a3c8db73902ee975f609dc25

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBTU International, Inc.

Victim entityBTU International, Inc.

IncidentRansomware

Stated responseTook protective actions to stop the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov