HackingManufacturingManufacturingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

QualiChem Metalworking

bd_27e2235a78be2efd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 25, 2026

Filed

Mar 10, 2026

To disclose

13 days

Affected

1state residents only

Linked

6 filings

Confidence

65%

Full breach record for QualiChem Metalworking →2 incidents on file

QualiChem Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting one NH resident. Unauthorized access occurred between Oct 23, 2025, and Dec 16, 2025. Discovery was confirmed on Feb 25, 2026. Data potentially included SSN, driver's license, medical/health insurance info, passport number, and financial account info. Notification mailed March 10, 2026, offering 1 year of Kroll credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d13 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 125 days

discovery → filing · 13 days

Oct 23, 2025

Begins

Feb 25, 2026

Discovered

Mar 10, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by nitrogen about this victim predates this filing by 41 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenitrogenbd_cbc78b10eae026882026-01-27 · +41dCandidate

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_9ab3de5f1d4ff3b92026-03-10Verified
Massachusetts State AGbd_4ba42c2c3fe4c5822026-04-29 · +50dVerified
Maine State AGbd_680189cb8e14e48c2026-04-29 · +50dCandidate
New Hampshire State AGbd_efde8dbb5a52aa812026-04-29 · +50dVerified

Name: Baker & Hostetler LLP (on behalf of QualiChem Inc.)
norm: baker hostetler llp on behalf of qualichem

Name: QualiChem Metalworking
norm: qualichem metalworking
Domain: qualichem.com
Industry: Manufacturingllm

Discovered: Feb 25, 2026
Breach occurred: Oct 23, 2025 – Dec 16, 2025
Undetected for: 125 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 10, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: exploit_public_facing

During the incident: Took steps to further secure the network
Began a forensic investigation
Reported the incident to law enforcement
Mailed a notification to the New Hampshire resident via United States First-Class mail
Offering the resident one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Kroll
Established a dedicated call center
Changes made: Continues to review and monitor the safeguards and security of their systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Indiana State AGMar 10 · first

New Hampshire State AGMar 10 · first · this page

Massachusetts State AG+50d

Maine State AG+50d

New Hampshire State AG+50d

Pattern: first filing Mar 10 (IN), last Apr 29 (NH) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/qualichem-20260310.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2026
Raw hash: 8b51de6adc7dd72351f5d173a59166c5ad6ab8232bdbfb5f26a30d0d02ed56b7

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityBaker & Hostetler LLP (on behalf of QualiChem Inc.)

Victim entityQualiChem Metalworking

Incidentdiscovered Feb 25, 2026

Stated responseTook steps to further secure the network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov