HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Velocity Risk Underwriters
bd_2fcba4315454f903 · schema v1 · pii pii-v1
Full breach record for Velocity Risk Underwriters →Velocity Risk Underwriters, LLC filed a supplemental notice with the New Hampshire Attorney General regarding a cybersecurity incident involving its prior third-party vendor, WaterStreet Company. The incident, discovered on March 17, 2025, involved unauthorized access to WaterStreet's systems, potentially compromising names, financial account information, and Social Security numbers of 31 New Hampshire residents. WaterStreet has implemented enhanced security measures, offered credit monitoring, and notified affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_cf1decc7cfc0f317Maine State AGfiled 2025-09-04Verified by operator
- bd_640c7bbdabca27ccIndiana State AGfiled 2025-08-08(27d gap)Verified
- bd_3228d13e1b7bb975Texas State AGfiled 2025-07-28(38d gap)Verified by operator
- bd_925ef2c1c3de1907New Hampshire State AGfiled 2025-07-24(42d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/velocity-risk-underwriters-20250904.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 4, 2025
- Raw hash
- dd117008e81feb64c73ab9b37153c5cfe9fcfc6978c47e0c3b2978e2175b1ad7
Reporting entity
- Name
- Velocity Risk Underwritersnorm: velocity risk underwriters
Victim entity
- Name
- Velocity Risk Underwritersnorm: velocity risk underwriters
Incident
- Discovered
- Mar 17, 2025
- Materiality determined
- —
- Notification sent
- Sep 4, 2025
- Affected individuals
- 31
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed supplemental notice with New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 24 weeks(171 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.