HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Chalmers Insurance Group

bd_5c3781163a45e216 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 13, 2025

Filed

Oct 10, 2025

To disclose

26 weeks

Affected

57state residents only

Linked

3 filings

Confidence

66%

Full breach record for Chalmers Insurance Group →

Chalmers Insurance Group notified the New Hampshire Attorney General that unauthorized access to its network occurred between April 8-10, 2025. The company discovered the unusual activity on April 13, 2025. Personal information, including names, SSNs, and driver's license numbers, of 57 New Hampshire residents was potentially compromised. Notices were sent on October 6, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 26 weeks / 180 days

Apr 8, 2025

Begins

Apr 13, 2025

Discovered

Oct 10, 2025

Filed

vs. sector median

+16 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_487a56084fbeb7182025-10-10Verified
Maine State AGbd_a3d7bc5b4bc273ed2025-10-10Verified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Chalmers Insurance Group
norm: chalmers insurance
Domain: chalmersinsurancegroup.com
Industry: Financial Servicesllm

Discovered: Apr 13, 2025
Breach occurred: Apr 8, 2025 – Apr 10, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 6, 2025
Affected individuals: 57state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Engaged independent cybersecurity experts to assist with a comprehensive investigation
Took steps to secure its systems
Established a toll-free call center through Kroll
Provided notified individuals with access to 12 months of free credit monitoring and identity protection services through Kroll
Changes made: Implemented security measures to further enhance its network security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(180 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGOct 10 · first

Maine State AGOct 10 · first

New Hampshire State AGOct 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chalmers-insurance-20251010.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2025
Raw hash: 183e92050a29245c6870dd28273f0efb1b4773bc97cea2dfff6e4c7d8fa1a0af

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityChalmers Insurance Group

Incidentdiscovered Apr 13, 2025

Stated responseEngaged independent cybersecurity experts to assist with a comprehensive investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov