HackingTechnologyRetail & ConsumerInformationDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)PIIMediumActive

BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION

bd_3e05293906e38af1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 17, 2024

Filed

Oct 9, 2025

To disclose

47 weeks

Affected

130state residents only

Linked

12 filings

Confidence

67%

Full breach record for BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION →

Brightstar Global Solutions Corporation notified the NH Attorney General of a security incident discovered on November 17, 2024, affecting 130 NH residents. Unauthorized access to internal systems exposed names, DOBs, government IDs, financial data, and health data. The company engaged law enforcement, conducted forensic reviews, and is providing credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 47 weeks / 326 days

Nov 17, 2024

Discovered

Oct 9, 2025

Filed

vs. sector median

+36 wks slower

This filing is one of 12 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Rhode Island State AGbd_cc2fbabf95330dd92025-10-08 · +1dVerified
Maine State AGbd_291f7d4e2d81e8452025-10-03 · +6dVerified
Washington State AGbd_356aa82e67f746c72025-10-03 · +6dVerified
California State AGbd_4d48839b8ce06ff92025-10-03 · +6dVerified by operator

Show 6 more filings ↓up to 29d gap

Oregon State AGbd_63684ffe1568c8c02025-10-03 · +6dVerified
HHS OCRbd_66dcd45db5aeb7172025-10-03 · +6dVerified
Massachusetts State AGbd_9cf73f58fff94add2025-10-03 · +6dVerified
Indiana State AGbd_cb1de963b79164d22025-10-03 · +6dVerified
Montana State AGbd_f3f3ca6b63c6e0122025-10-03 · +6dVerified
Texas State AGbd_5141cfedcf91cfed2025-11-07 · +29dVerified

Showing first 10 of 11 linked disclosures.

Name: BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION
norm: brightstar global

Name: BRIGHTSTAR GLOBAL SOLUTIONS CORPORATION
norm: brightstar global
Industry: TechnologyllmRetail & Consumerllm

Discovered: Nov 17, 2024
Materiality determined: —
Notification sent: —
Affected individuals: 130state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to law enforcement and certain regulators
Initial access: valid_credentials

During the incident: Took immediate action to resecure the impacted systems
Investigated the incident
Reported the incident to law enforcement and certain regulators
Conducted a detailed review of impacted data
Finalized its time-intensive data mining process
Continues to monitor its systems
Introduced additional measures to further enhance its security defenses
Providing credit monitoring to affected individuals through Kroll
Changes made: Introduced additional measures to further enhance its security defenses
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(326 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Maine State AGOct 3 · first

Washington State AGOct 3 · first

California State AGOct 3 · first

Oregon State AGOct 3 · first

HHS OCROct 3 · first

Massachusetts State AGOct 3 · first

Indiana State AGOct 3 · first

Montana State AGOct 3 · first

Rhode Island State AG+5d

New Hampshire State AG+6d · this page

Texas State AG+35d

Pattern: first filing Oct 3 (ME), last Nov 7 (TX) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/brightstar-global-solutions-20251009.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2025
Raw hash: 435e493c0903baf90b7a4d7aba6e62ebb6511701ac90cf343b5920c1e4c84fdc

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityBRIGHTSTAR GLOBAL SOLUTIONS CORPORATION

Victim entityBRIGHTSTAR GLOBAL SOLUTIONS CORPORATION

Incidentdiscovered Nov 17, 2024

Stated responseTook immediate action to resecure the impacted systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov