HackingOtherCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Champagne Holdings LLC

bd_35d6668dbae723c4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 18, 2025

Filed

Aug 22, 2025

To disclose

22 weeks

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Champagne Holdings LLC →2 incidents on file

Champagne Holdings, LLC notified the New Hampshire Attorney General on August 22, 2025, of a data security incident discovered on March 18, 2025. Unauthorized access to files containing names and Social Security numbers occurred around March 26, 2025. Approximately three New Hampshire residents were affected. The company engaged cybersecurity experts, offered complimentary identity monitoring through Kroll, and implemented enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 26, 2025

Begins

Aug 22, 2025

Filed

vs. sector median

+15 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_c589af79f59976b52025-08-22Candidate

Name: Champagne Holdings LLC
norm: champagne holdings

Name: Champagne Holdings LLC
norm: champagne holdings
Industry: Otherllm

Discovered: Mar 18, 2025
Breach occurred: Mar 26, 2025
Materiality determined: —
Notification sent: Aug 22, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Engaged independent cybersecurity experts to investigate
Undertook a comprehensive review of those files
Provided written notice of this incident via first class U.S. mail
Offered complimentary identity protection services to all individuals notified of the incident
Secured the services of Kroll to provide identity monitoring
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(157 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGAug 22 · first

New Hampshire State AGAug 22 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/champagne-holdings-20250822.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2025
Raw hash: 523bf875ddde1083d46d3d7ce654d0f51d8138d5356a86eb824bffd388a37fb0

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityChampagne Holdings LLC

Victim entityChampagne Holdings LLC

Incidentdiscovered Mar 18, 2025

Stated responseEngaged independent cybersecurity experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov