HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
BDMPA LLC
bd_6729324844fdd3f0 · schema v1 · pii pii-v1
Full breach record for BDMPA LLC →BDMPA LLC dba Austin Associates notified the New Hampshire Attorney General of a data event affecting 78 NH residents. Unauthorized access occurred between Feb 26 and Mar 17, 2025, involving an unknown actor accessing systems and potentially copying files containing names, DOBs, SSNs, and financial account info. Austin engaged third-party specialists, notified law enforcement, and provided 1 year of Kroll credit monitoring to affected residents. Notices were sent to residents on Dec 31, 2025.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_bd0ee3b9441c3505Indiana State AGfiled 2025-12-31Verified
- bd_336ae3077f390d8cMaine State AGfiled 2026-01-01(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bdmpa-austin-associates-20251231.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 31, 2025
- Raw hash
- 82124ab688aed167777fccfc014ac5e50f9afe8a078835b2f79388c613662f65
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- BDMPA LLCnorm: bdmpa
- Domain
- austinpa.com
Incident
- Discovered
- Mar 17, 2025
- Materiality determined
- —
- Notification sent
- Dec 31, 2025
- Affected individuals
- 78
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 41 weeks(289 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.