HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Dulcich, Inc.
bd_61fef1f061261ef6 · schema v1 · pii pii-v1
Full breach record for Dulcich, Inc. →Dulcich, Inc. notified the New Hampshire Attorney General of a security incident affecting approximately 4 NH residents. Unauthorized access occurred June 24-25, 2024. Data potentially accessed included names, DOB, SSN, and health insurance info. Incident contained; FBI notified. Notifications sent Oct 14, 2025, offering credit monitoring.
This filing is one of 9 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- bd_367e3fa6887321c6Texas State AGfiled 2025-10-16(4d gap)Verified
- bd_0216d6506e680296Maine State AGfiled 2025-10-14(6d gap)Candidate
- bd_1239faefddba161cMontana State AGfiled 2025-10-14(6d gap)Verified
- bd_3a0e057df921610dOregon State AGfiled 2025-10-14(6d gap)Verified
Show 4 more filings ↓Show fewer ↑up to 6d gap
- bd_4ec290f1d656cd5fVermont State AGfiled 2025-10-14(6d gap)Verified
- bd_551f06b9dc1db169Washington State AGfiled 2025-10-14(6d gap)Verified
- bd_d6aac9753c52fa00Indiana State AGfiled 2025-10-14(6d gap)Verified
- bd_eaf989bf564b5f80California State AGfiled 2025-10-14(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/dulcich-20251020.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 20, 2025
- Raw hash
- 3f35f9393ef319bf712d6de29dffa2a06586e17e6e9a463c3167c3dc098273d1
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- Dulcich, Inc.norm: dulcich
Incident
- Discovered
- Jun 24, 2024
- Materiality determined
- —
- Notification sent
- Oct 14, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 months(483 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.