HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Advantive
bd_27b85f3f60ce8e7d · schema v1 · pii pii-v1
Full breach record for Advantive →Advantive LLC notified the New Hampshire Attorney General on July 2, 2026, of a data event affecting approximately 35 NH residents. On or about April 10, 2026, Advantive detected suspicious activity involving its software platform, allowing an unknown actor to access customer files without authorization. The accessed data included names and payment card information (numbers, CVVs, expiration dates). Advantive investigated, implemented additional security measures, and provided 12 months of credit monitoring through Haystack to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_fb71ddc6d8ecbfa0Vermont State AGfiled 2026-07-02Verified
- bd_61b94b1217255086Texas State AGfiled 2026-07-03(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/advantive-20260702.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2026
- Raw hash
- 6a338299f9b8538aca693c836942b476cd1ef6d5fa4564aafdeec1ce513c2632
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Advantivenorm: advantive
- Domain
- advantive.mybenefits.life
Incident
- Discovered
- Apr 10, 2026
- Materiality determined
- —
- Notification sent
- Jul 2, 2026
- Affected individuals
- 35
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- providing written notice of this incident to relevant state regulators, where required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(83 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.