HackingOtherRetailCustomer Data InvolvedPIIIdentity (basic)LowContained

Greenhouse Apartments

bd_5db157a86275d066 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 21, 2025

Filed

Mar 18, 2026

To disclose

25 weeks

Affected

949state residents only

Linked

3 filings

Confidence

65%

Full breach record for Greenhouse Apartments →

Greenhouse Apartments experienced a cybersecurity incident from September 20-21, 2025, discovered on September 21, 2025. The incident potentially affected personal information of residents in Massachusetts and Rhode Island. The company engaged a third-party cybersecurity firm, contained the incident, and is offering free credit monitoring to affected individuals. No evidence of misuse has been found.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d25 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 25 weeks / 178 days

Sep 20, 2025

Begins

Sep 21, 2025

Discovered

Mar 18, 2026

Filed

vs. sector median

+17 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_88582f0cbfbee3672026-03-17 · +1dVerified
Indiana State AGbd_88fe207ec50637f92026-03-16 · +2dCandidate

Name: Greenhouse Apartments
norm: greenhouse apartments

Name: Greenhouse Apartments
norm: greenhouse apartments
Industry: Otherllm

Discovered: Sep 21, 2025
Breach occurred: Sep 20, 2025 – Sep 21, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 949state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown
Threat actor: External

During the incident: Launched an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Took steps to mitigate the potential impact to our community
Notified appropriate parties regarding this incident
Providing access to free credit monitoring
Changes made: Committed to continuing to strengthen system’s security to prevent a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(178 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 16 · first

Maine State AG+1d

Massachusetts State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-415-greenhouse-apartments/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 18, 2026
Raw hash: 91c2e22fb4e20299bdef717e884829a28d9f521d2aa24d86145f647ccc59fd5e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityGreenhouse Apartments

Victim entityGreenhouse Apartments

Incidentdiscovered Sep 21, 2025

Stated responseLaunched an investigation

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov