HackingStolen CredentialsVulnerability ExploitData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumContained
H&H Color Lab
bd_390908f440605a15 · schema v1 · pii pii-v1
Full breach record for H&H Color Lab →H&H Color Lab, Inc. notified the New Hampshire Attorney General of a security incident affecting two NH residents. Unauthorized access occurred on July 30, 2025, detected on July 31, 2025. Impacted data included names, SSNs, driver's licenses, health insurance numbers, financial account numbers, and usernames/passwords. The company engaged forensic experts, reset passwords, rebuilt servers, and provided one year of credit monitoring. Notification was mailed on January 13, 2026.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/h-h-color-lab-20260113.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2026
- Raw hash
- 9a5527762c8e5671fb186287c3826a9673d7c65ebe9fddda0bcc82f9982acfeb
Reporting entity
- Name
- H&H Color Labnorm: h h color lab
Victim entity
- Name
- H&H Color Labnorm: h h color lab
Incident
- Discovered
- Jul 31, 2025
- Materiality determined
- —
- Notification sent
- Jan 13, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 weeks(166 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.