Social EngineeringFinancial ServicesGovernmentFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedGovernment IDIdentity (basic)FinancialMediumContained

NEW HAMPSHIRE HOUSING FINANCE AUTHORITY

bd_4263a68dfb0d7ac4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 17, 2025

Filed

Oct 17, 2025

To disclose

4 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for NEW HAMPSHIRE HOUSING FINANCE AUTHORITY →

New Hampshire Housing Finance Authority (NHHFA) reported a security incident where an employee's email account was accessed by an unauthorized individual on August 25, 2025. NHHFA discovered the breach on September 17, 2025. The attacker viewed mortgage application documents containing SSNs, DOBs, and income data. No data was downloaded. NHHFA secured the account, enhanced email security, and offered 24 months of Experian credit monitoring to affected individuals. Notification to NH AG was filed October 17, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 23 days

discovery → filing · 4 weeks / 30 days

Aug 25, 2025

Begins

Sep 17, 2025

Discovered

Oct 17, 2025

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: NEW HAMPSHIRE HOUSING FINANCE AUTHORITY
norm: new hampshire housing finance authority

Name: NEW HAMPSHIRE HOUSING FINANCE AUTHORITY
norm: new hampshire housing finance authority
Industry: Financial ServicesllmGovernmentllm

Discovered: Sep 17, 2025
Breach occurred: Aug 25, 2025
Undetected for: 23 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 14, 2025
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Promptly secured the affected account
Implemented enhanced security measures across its email systems
Proactively contacted all potentially affected individuals
Offering two years of complimentary identity and credit monitoring services through Experian
Changes made: Implemented enhanced security safeguards for our system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-hampshire-housing-finance-authority-20251017.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2025
Raw hash: b59a982b2514b8d43adc8314b6badf3d0dd9e157f77921fd096d6074017e74f4

Reporting entityNEW HAMPSHIRE HOUSING FINANCE AUTHORITY

Victim entityNEW HAMPSHIRE HOUSING FINANCE AUTHORITY

Incidentdiscovered Sep 17, 2025

Stated responsePromptly secured the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov