HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
AttainX
bd_396aee6c98f07428 · schema v1 · pii pii-v1
Full breach record for AttainX →AttainX, Inc. notified the New Hampshire Attorney General of a data event affecting one resident. Unauthorized access and download of files occurred between April 13 and May 15, 2025, discovered on May 15. Data included names, SSNs, driver's licenses, passports, and financial accounts. AttainX engaged forensic specialists, secured the network, and offered one year of credit monitoring.
Leak gap clock⏱ Leak >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 138 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_51f7cf2648c044edMontana State AGfiled 2025-09-30Candidate
- bd_a817009afd5fbb7dIndiana State AGfiled 2025-09-30Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/attainx-20250930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 30, 2025
- Raw hash
- e75ddb922393b9a02a9a624f38a9c48db3043a35751185e30bf24dbdf506c8b0
Reporting entity
- Name
- AttainXnorm: attainx
- Domain
- attainx.com
Victim entity
- Name
- AttainXnorm: attainx
- Domain
- attainx.com
Incident
- Discovered
- May 15, 2025
- Materiality determined
- —
- Notification sent
- Sep 30, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney GeneralProviding written notice to the three major credit reporting agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 20 weeks(138 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.