EASTERLY GOVERNMENT PROPERTIES, INC.
bd_51e574be95326e7b · schema v1 · pii pii-v1
Full breach record for EASTERLY GOVERNMENT PROPERTIES, INC. →Easterly Government Properties, Inc. notified the New Hampshire Attorney General of a third-party data security incident involving its vendor, Ernst and Young LLP (EY). On May 21, 2026, Easterly learned that an unauthorized actor compromised EY’s Jira Service Management platform, resulting in the unauthorized acquisition of personal information for one New Hampshire resident. The affected data included name, physical mailing address, Social Security number, taxable income, and footnote data. Easterly notified the individual on June 8, 2026, and offered 24 months of complimentary credit monitoring and identity restoration services through Epiq. The incident is classified as a supply-chain compromise.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_476ca73d9922ca52Massachusetts State AGfiled 2026-06-01(14d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/easterly-government-properties-20260615.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 15, 2026
- Raw hash
- 48d7e7a137c389872a968ed0f986505f72e282b3a53087d7f2b4e32336b51dce
Reporting entity
- Name
- GOODWIN PROCTER LLPnorm: goodwin procter
- Domain
- goodwinlaw.com
Victim entity
- Name
- EASTERLY GOVERNMENT PROPERTIES, INC.norm: easterly government properties
- Domain
- easterlyreit.com
Incident
- Discovered
- May 21, 2026
- Materiality determined
- —
- Notification sent
- Jun 8, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General
- Third party
- via Ernst and Young LLP
- Initial access
- supply_chain
Compliance
- Time to disclose
- 25 days(25 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.