HackingOtherData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

New Hampshire Historical Society

bd_6a2e16e40b883f09 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2026

Filed

Apr 1, 2026

To disclose

7 weeks

Affected

63state residents only

Linked

5 filings

Confidence

68%

Full breach record for New Hampshire Historical Society →

New Hampshire Historical Society notified the NH Attorney General of a data event discovered on February 13, 2026. Unauthorized access resulted in the copying of names and Social Security numbers for 63 NH residents. The Society engaged forensic investigators and legal counsel, mailed notifications on April 1, 2026, and offered 12 months of credit monitoring via TransUnion/Cyberscout.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 47 days

Feb 13, 2026

Discovered

Apr 1, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_454407f5e00ef36c2026-04-01Candidate
Massachusetts State AGbd_9b87ba887e50caab2026-04-01Verified
Indiana State AGbd_a1b8c9ff8dea473f2026-04-01Verified
Maine State AGbd_f876bba9e20e576f2026-04-01Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: New Hampshire Historical Society
norm: new hampshire historical society
Domain: nhhs.org
Industry: Otherllm

Discovered: Feb 13, 2026
Materiality determined: —
Notification sent: Apr 1, 2026
Affected individuals: 63state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General John M. Formella, Consumer Protection Bureau

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Retained legal counsel
Began identifying the affected individuals in preparation for notice
Mailed notification letters on April 1, 2026
Changes made: Offered at least 12 months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company
Provided guidance on how to better protect against identity theft and fraud, including information on how to place a fraud alert and security freeze on one’s credit file
Provided contact details for the national consumer reporting agencies
Provided information on how to obtain a free credit report
Provided contact details for the Federal Trade Commission
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGApr 1 · first

Massachusetts State AGApr 1 · first

Indiana State AGApr 1 · first

Maine State AGApr 1 · first

New Hampshire State AGApr 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/new-hampshire-historical-society-20260401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2026
Raw hash: 25601b8a991b47ea93819e61f8f5cb5d55ba5ad3b702e75da92addc0a0935c51

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityNew Hampshire Historical Society

Incidentdiscovered Feb 13, 2026

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov