HackingVulnerability ExploitCapture Stored DataData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Coalesce, LLC
bd_59c616a3beb55b43 · schema v1 · pii pii-v1
Full breach record for Coalesce, LLC →Supplemental notice from Coalesce LLC dba BenefitElect to NH AG regarding unauthorized access to FTP systems via Crush FTP vulnerability. Files copied March 30-31, 2025. Incident discovered April 2, 2025. Data included names, SSNs, DOBs, addresses. 2 NH residents notified in this supplemental wave.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_62ea993029fbd3e3Vermont State AGfiled 2026-03-23Verified
- bd_6c725b630db75cfbCalifornia State AGfiled 2026-03-23Candidate
- bd_7a6875a07dbc7135Indiana State AGfiled 2026-03-23Verified
- bd_c295aef51e830473Texas State AGfiled 2026-03-23Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/coalesce-benefitelect-20260323.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 23, 2026
- Raw hash
- ae818c8ab06e7059dbeb916a09140f0f6c261ea29104c6d0099a39d450c68c86
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Coalesce, LLCnorm: coalesce
Incident
- Discovered
- Apr 2, 2025
- Materiality determined
- —
- Notification sent
- Mar 23, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Supplementing October 15, 2025 notice to New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 51 weeks(355 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.