UnknownRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMedium

CARL BUDDIG AND COMPANY

bd_403dec67e37b5000 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 17, 2024

To disclose

—

Affected

1state residents only

Linked

5 filings

Confidence

68%

Full breach record for CARL BUDDIG AND COMPANY →

Carl Buddig and Company notified approximately one New Hampshire resident on April 17, 2024, of a cybersecurity incident involving unauthorized access to personal information. The company notified federal law enforcement, implemented additional security measures, and provided complimentary credit monitoring through Experian. No evidence of actual misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Apr 17, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_96e5e27b0f960cf42024-04-17Candidate
Massachusetts State AGbd_b8495f2b05bc02f62024-04-17Verified
Indiana State AGbd_d2054efabaa18a9e2024-04-17Verified
Illinois State AGbd_92c20a1334c060172024-04-01 · +16dVerified by operator

Name: CARL BUDDIG AND COMPANY
norm: carl buddig and

Name: CARL BUDDIG AND COMPANY
norm: carl buddig and
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: Apr 17, 2024
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown

During the incident: Notified federal law enforcement of this event
Providing access to credit monitoring services for , through Experian, to individuals whose personal information was potentially affected by this event, at no cost to these individuals
Changes made: Reviewed and enhanced its existing policies and procedures relating to data protection and security
Implemented additional security measures to mitigate risk associated with this incident and to help prevent future similar incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGApr 1 · first

Maine State AG+16d

Massachusetts State AG+16d

Indiana State AG+16d

New Hampshire State AG+16d · this page

Pattern: first filing Apr 1 (IL), last Apr 17 (NH) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/carl-buddig-20240417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 17, 2024
Raw hash: 59823cbeeeabdd91610292264b9f3b0da72d6a011a2049708b281a8e6e1cb17d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCARL BUDDIG AND COMPANY

Victim entityCARL BUDDIG AND COMPANY

IncidentUnknown

Stated responseNotified federal law enforcement of this event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov