HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumActive
Central Boiler Companies, Inc.
bd_37d56cc45e074d73 · schema v1 · pii pii-v1
Full breach record for Central Boiler Companies, Inc. →Central Boiler Companies, Inc. notified the New Hampshire Attorney General on November 5, 2025, of a cyber-attack discovered on August 1, 2025. The incident involved unauthorized access to customer data, specifically names and Social Security numbers, affecting 4 New Hampshire residents. Central Boiler engaged third-party forensic specialists, reported the incident to federal law enforcement, and provided 12 months of complimentary credit monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5f62d22566331efcVermont State AGfiled 2025-11-05Verified
- bd_6555b10729ed64b4Montana State AGfiled 2025-11-05Verified
- bd_a7f9e0855940fbf4Maine State AGfiled 2025-11-05Verified
- bd_5eb2d71903910893Indiana State AGfiled 2025-09-29(37d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/central-boiler-20251105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 5, 2025
- Raw hash
- e69ae5100bef3b3a2b09c00ef77f886f16389d62c31b1e40d4ae31a3cc2e9a94
Reporting entity
- Name
- Central Boiler Companies, Inc.norm: central boiler companies
Victim entity
- Name
- Central Boiler Companies, Inc.norm: central boiler companies
Incident
- Discovered
- Aug 1, 2025
- Materiality determined
- —
- Notification sent
- Oct 27, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- reported this incident to federal law enforcement
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(96 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.