HackingIdentity (basic)Government IDFinancial accountMediumContained

New Hampshire Housing

bd_4246a17564f09d62 · schema v1 · pii pii-v1

Severity

Medium

Financial impact

$848

Discovered

Jul 2, 2026

Filed

Jul 30, 2026

To disclose

28 days

Affected

Not disclosed

Confidence

67%

Full breach record for New Hampshire Housing →

New Hampshire Housing reported a security incident involving a participating landlord's compromised credentials. An unauthorized party accessed the landlord's Yardi RentCafe portal, changing banking details and misappropriating $848 in HUD subsidy funds. Tenant names, addresses, and landlord financial/PII data were exposed. NH Housing notified HUD and is strengthening payment verification protocols.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Jul 2, 2026

Discovered

Jul 30, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: New Hampshire Housing
norm: new hampshire housing

Name: New Hampshire Housing
norm: new hampshire housing

Discovered: Jul 2, 2026
Materiality determined: —
Notification sent: Jul 30, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notified the U.S. Department of Housing and Urban Development (HUD)
Initial access: valid_credentials

During the incident: Reviewing our payment security protocols to further strengthen our controls
Additional verification procedures when there are changes to banking information made in the portal
Meeting with Yardi software representatives to discuss the security vulnerability in their portals
Changes made: Additional verification procedures when there are changes to banking information made in the portal
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-hampshire-housing-yardi-rentcafe-20260730.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2026
Raw hash: c8b11d719c18688e78f112d4840d0f3e0955de91bb90f7218ab4da6f7ec0ed53

Reporting entityNew Hampshire Housing

Victim entityNew Hampshire Housing

Incidentdiscovered Jul 2, 2026

Stated responseReviewing our payment security protocols to further strengthen our controls

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov