HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
DALB Inc.
bd_6ba592ef19cdfe83 · schema v1 · pii pii-v1
Full breach record for DALB Inc. →DALB, Inc. notified the New Hampshire Attorney General on October 21, 2025, of a data security incident detected on May 20, 2025. Unauthorized access to files containing names, SSNs, passport numbers, and medical/insurance info was determined on October 16, 2025. One NH resident was notified. Credit monitoring via TransUnion was offered.
Leak gap clock⏱ Leak >90d22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 155 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_20ce051cf698fc11Indiana State AGfiled 2025-10-21Candidate
- bd_9aa7a6d349ef46efMaine State AGfiled 2025-10-21Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/dalb-20251021.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2025
- Raw hash
- 9a83e45b53a2ce6a75dbd988f33ac6941346b50a6c83991c211b9be64cc0a11d
Reporting entity
- Name
- DALB Inc.norm: dalb
- Domain
- dalb.com
Victim entity
- Name
- DALB Inc.norm: dalb
- Domain
- dalb.com
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Oct 21, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 22 weeks(154 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.