Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Grand HVAC Leasing USA, LLC
bd_609d929585943a49 · schema v1 · pii pii-v1
Full breach record for Grand HVAC Leasing USA, LLC →Grand HVAC Leasing USA, LLC notified New Hampshire residents of a phishing incident where an unauthorized third party accessed an employee email account between Sept 25 and Oct 4, 2024. The attacker viewed emails containing customer PII. No misuse was detected. The company engaged forensic experts, contained the breach, and enhanced security protocols.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/grand-hvac-leasing-usa-20250115.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 15, 2025
- Raw hash
- 0ccb9e8095b0c6d6f697bb0f7877b163ea50d75b7a178400c79855c3b840953a
Reporting entity
- Name
- Grand HVAC Leasing USA, LLCnorm: grand hvac leasing usa
Victim entity
- Name
- Grand HVAC Leasing USA, LLCnorm: grand hvac leasing usa
Incident
- Discovered
- Oct 4, 2024
- Materiality determined
- —
- Notification sent
- Jan 13, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- notified relevant state regulators
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(103 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.