HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTIDENTITY_GOVERNMENTMediumContained
American Credit Counseling Service, Inc.
bd_3337b7dc45fb8d6a · schema v1 · pii pii-v1
Full breach record for American Credit Counseling Service, Inc. →American Consumer Credit Counseling, Inc. notified the New Hampshire Attorney General of a cybersecurity event where an unauthorized person gained access to systems on January 29, 2025. The incident affected 86 New Hampshire residents, exposing names, financial account/payment card numbers, and one resident's SSN. ACCC engaged forensic investigators, contained the incident, and provided credit monitoring services to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4bceecb93f92722eMontana State AGfiled 2025-07-15Candidate
- bd_9b4abdf33469d371California State AGfiled 2025-07-15Verified
- bd_df9d345338fb434bIndiana State AGfiled 2025-07-15Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/american-consumer-credit-counseling-20250715.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 15, 2025
- Raw hash
- a3210a9352080acc7e9abf6f621dbe67d1e19ce82e97e0aa8c2c3de174562d5c
Reporting entity
- Name
- American Credit Counseling Service, Inc.norm: american credit counseling service
- Domain
- accs.org
Victim entity
- Name
- American Credit Counseling Service, Inc.norm: american credit counseling service
- Domain
- accs.org
Incident
- Discovered
- Jan 29, 2025
- Materiality determined
- —
- Notification sent
- Jul 15, 2025
- Affected individuals
- 86
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 24 weeks(167 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.