HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Financial accountLowContained

H2 Builders

bd_3eced92683a1d585 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 6, 2025

Filed

Apr 27, 2026

To disclose

14 days

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for H2 Builders →

H2 Builders LLC notified the New Hampshire Attorney General of a cybersecurity incident occurring between September 29 and October 6, 2025. Unauthorized access to H2's internal network resulted in the potential acquisition of personal information, including names and financial account details, affecting a limited number of New Hampshire residents. H2 contained the incident, engaged forensic experts, and began notifying affected individuals on or about April 13, 2026.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d14 days discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 7 days

discovery → filing · 29 weeks / 203 days

Sep 29, 2025

Begins

Oct 6, 2025

Discovered

Apr 27, 2026

Filed

vs. sector median

17 wks faster

This filing is one of 3 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 103 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_b87c4e24a125f89e2026-01-14 · +103dCandidate

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_c7322b8b181344182026-04-23 · +4dVerified by operator

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: H2 Builders
norm: h2 builders
Domain: h2builders.com
Industry: Professional Servicesllm

Discovered: Oct 6, 2025
Breach occurred: Sep 29, 2025 – Oct 6, 2025
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 13, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General, Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Engaged cybersecurity experts to identify what personal information, if any, was involved
Conducted a thorough investigation
Immediately contained the incident
Provided notification to potentially affected residents
Advised residents to review financial account statements and credit reports
Advised residents on placing a fraud alert and/or security freeze on credit files
Changes made: Continually evaluates and modifies practices to enhance security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 23 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/h2-builders-20260427.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 27, 2026
Raw hash: 9d9cf073e75a2321e396a8b1c57a0738e6cfb338202d985a0de91324bd691fce

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityH2 Builders

Incidentdiscovered Oct 6, 2025

Stated responseEngaged cybersecurity experts to identify what personal information, if any, was involved

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov