HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

MAG DS CORP.

bd_279aa78d1a54080f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2025

Filed

Dec 4, 2025

To disclose

3 days

Affected

6state residents only

Linked

8 filings

Confidence

66%

Full breach record for MAG DS CORP. →

MAG DS Corp. (dba MAG Aerospace) notified the New Hampshire Attorney General of a data incident where an unauthorized third party accessed personal information (DOB, SSN) of 6 NH residents between Aug 30-31, 2025. The breach was discovered on Dec 1, 2025. MAG engaged forensic experts, contained the network, reset passwords, and contacted law enforcement. Affected individuals are offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 93 days

discovery → filing · 3 days

Aug 30, 2025

Begins

Dec 1, 2025

Discovered

Dec 4, 2025

Filed

vs. sector median

18 wks faster

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_0d1bbd836b9286842025-12-04Candidate
Montana State AGbd_de03af1ed99bd9242025-12-04Verified
Indiana State AGbd_08dd1559ad977fea2025-12-05 · +1dVerified
Nebraska State AGbd_11079162f07f76692025-12-05 · +1dVerified

Show 3 more filings ↓up to 1d gap

Texas State AGbd_49e0d66755af85012025-12-05 · +1dVerified
Massachusetts State AGbd_68e44faf18a41cb12025-12-05 · +1dVerified
Vermont State AGbd_6988ddd233d64e122025-12-05 · +1dVerified

Name: SHEPPARD, MULLIN, RICHTER & HAMPTON LLP
norm: sheppard mullin richter hampton

Name: MAG DS CORP.
norm: mag ds
Also named: MAG DS Corp.dba oflegal entity
MAG Aerospacedba oftrade name
Industry: Technologyllm

Discovered: Dec 1, 2025
Breach occurred: Aug 30, 2025 – Aug 31, 2025
Undetected for: 93 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 5, 2025
Affected individuals: 6state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation with the help of third-party forensic experts
Quarantining assets
Disabling affected accounts and domains
Blocking access to its network
Resetting passwords for affected accounts
Contacting law enforcement through counsel
Changes made: Offering impacted individuals, including impacted New Hampshire residents, 24 months of free fraud detection monitoring and identity theft protection through Experian’s IdentityWorksSM product
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 3 days(3 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Maine State AGDec 4 · first

Montana State AGDec 4 · first

New Hampshire State AGDec 4 · first · this page

Indiana State AG+1d

Nebraska State AG+1d

Texas State AG+1d

Massachusetts State AG+1d

Vermont State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mag-ds-aerospace-20251204.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 4, 2025
Raw hash: 34aad8c3331ef9e4e913268a8409d3388b10f345ab23ba87ac9a9d123364c43a

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entitySHEPPARD, MULLIN, RICHTER & HAMPTON LLP

Victim entityMAG DS CORP.

Incidentdiscovered Dec 1, 2025

Stated responseLaunched an investigation with the help of third-party forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov