HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
CNHI, LLC
bd_5c40821d85f38ced · schema v1 · pii pii-v1
Full breach record for CNHI, LLC →CNHI, LLC notified the New Hampshire Attorney General of a security incident where an unauthorized actor accessed its network between April 27 and May 17, 2025. The breach exposed names, Social Security numbers, driver's license numbers, and financial account numbers of 847 NH residents. CNHI discovered the incident on November 19, 2025, and began notifying residents on December 8, 2025, offering one year of credit monitoring via Experian.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_51267646cce26e95Indiana State AGfiled 2025-12-08Verified
- bd_636302d394e1cd30Vermont State AGfiled 2025-12-08Verified
- bd_bad5e82d02c73257South Carolina State AGfiled 2025-12-08Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cnhi-20251208.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 8, 2025
- Raw hash
- 86e0adce83809feb3d9c4c7267ddc892a77ddc3b59f77324b6659237b65c3378
Reporting entity
- Name
- CNHI, LLCnorm: cnhi
Victim entity
- Name
- CNHI, LLCnorm: cnhi
Incident
- Discovered
- Nov 19, 2025
- Materiality determined
- —
- Notification sent
- Dec 8, 2025
- Affected individuals
- 847
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 days(19 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.