Social EngineeringPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICHighContained
Meridian Risk Management Inc
bd_6b6cf4cdec846943 · schema v1 · pii pii-v1
Full breach record for Meridian Risk Management Inc →Meridian Risk Management Insurance, Inc. notified the New Hampshire Attorney General of a business email compromise discovered on March 19, 2024. The incident affected 1,383 individuals, including 1 New Hampshire resident. Compromised data included names, SSNs, driver's licenses, bank account numbers, and medical information. Meridian engaged forensic investigators, secured accounts, and offered 12 months of credit monitoring. Notifications were mailed on December 29, 2025.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_542aae65b226b106Indiana State AGfiled 2025-12-29Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/meridian-risk-insurance-20251229.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2025
- Raw hash
- 0522ab9e2d6214c001abd8d6882c9d6fb69038bfb5529c2d279f65b4c5a6152c
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- Meridian Risk Management Incnorm: meridian risk management
Incident
- Discovered
- Mar 19, 2024
- Materiality determined
- —
- Notification sent
- Dec 29, 2025
- Affected individuals
- 1,383
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- phishing_link
Compliance
- Time to disclose
- 22 months(650 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.