Social EngineeringOtherPhishingCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Regina Caeli

bd_32aa387aeeada605 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 17, 2025

Filed

Mar 13, 2026

To disclose

12 weeks

Affected

1state residents only

Confidence

67%

Full breach record for Regina Caeli →

Regina Caeli, Inc. reported a data security incident to the New Hampshire Attorney General on March 13, 2026. The company discovered suspicious email activity on December 17, 2025, leading to the unauthorized access of one employee's email account. The breach affected one New Hampshire resident, exposing their name and driver's license number. Regina Caeli engaged cybersecurity experts, notified the FBI IC3, and provided the affected individual with complimentary identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 86 days

Dec 17, 2025

Discovered

Mar 13, 2026

Filed

vs. sector median

+4 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Regina Caeli
norm: regina caeli
Domain: rcahybrid.org

Name: Regina Caeli
norm: regina caeli
Domain: rcahybrid.org
Industry: Otherllm

Discovered: Dec 17, 2025
Materiality determined: —
Notification sent: Mar 13, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to the FBI’s Internet Crime Complaint Center
Initial access: phishing_link

During the incident: Engaged independent cybersecurity experts to assist with the process
Reported this incident to the FBI’s Internet Crime Complaint Center
Provided the notified individual with information about steps they can take to help protect their personal information
Offered them access to complimentary identity protection services
Changes made: Implemented measures to enhance the security of its environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/regina-caeli-20260313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2026
Raw hash: 48892263ca42131d70129961ac89d79b7b5d6445cccbe4d468fd56a06c8ccce5

Reporting entityRegina Caeli

Victim entityRegina Caeli

Incidentdiscovered Dec 17, 2025

Stated responseEngaged independent cybersecurity experts to assist with the process

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov