HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

11th St. Commons

bd_64629f3cc2cc3675 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 19, 2026

Filed

Jun 11, 2026

To disclose

12 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for 11th St. Commons →2 incidents on file

11th St. Commons, a financial advisory firm, notified the NH Attorney General of a data security incident discovered on March 19, 2026. Suspicious network activity led to forensic investigation, revealing unauthorized acquisition of names and Social Security numbers. One New Hampshire resident was notified on June 11, 2026. The firm offered credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 84 days

Mar 19, 2026

Discovered

Jun 11, 2026

Filed

vs. sector median

+4 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_864213fa41163f9c2026-06-11Candidate

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: 11th St. Commons
norm: 11th st commons
Industry: Financial Servicesllm

Discovered: Mar 19, 2026
Materiality determined: —
Notification sent: Jun 11, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of independent forensic experts
Engaged an independent team to conduct a comprehensive review of the data involved
Worked diligently to identify updated contact information to effectuate notification
Prepare the identity protection services being offered
Providing individuals with information about steps that they can take to help protect their personal information
Offering individuals complimentary credit monitoring and identity protection services through IDX
Implemented additional technical security measures throughout the environment
Changes made: Implemented additional technical security measures throughout the environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(84 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJun 11 · first

New Hampshire State AGJun 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/11th-st-commons-20260611.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2026
Raw hash: 834806b8bdae5cf5aad093529630bcc2d4ba1fe4589930f372284f968a0b997f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entity11th St. Commons

Incidentdiscovered Mar 19, 2026

Stated responseLaunched an investigation with the assistance of independent forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov