HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
illumifin
bd_6bd728330d629966 · schema v1 · pii pii-v1
Full breach record for illumifin →illumifin Corporation, an insurance technology company, notified the New Hampshire Attorney General on March 31, 2026, of a breach affecting 15 NH residents. The incident was discovered on November 4, 2025, when unauthorized access to illumifin's network resulted in the exfiltration of files containing names, SSNs, dates of birth, and health/medical information. illumifin engaged forensic investigators and law enforcement, and is offering credit monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_61ed61057416aef1Indiana State AGfiled 2026-03-31Candidate
- bd_89959561b8e6cb30Texas State AGfiled 2026-04-02(2d gap)Verified
- bd_45251292f85141d1New Hampshire State AGfiled 2026-04-22(22d gap)Verified
- bd_c525393ebdb28714Oregon State AGfiled 2026-04-22(22d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/illumifin-20260331.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 31, 2026
- Raw hash
- 60a809c546bc0184c95b11b3f6341fe4f2e2404f9e7005c0ec257f8aa65d12e0
Reporting entity
- Name
- illumifin
- Domain
- illumifin.com
Victim entity
- Name
- illumifin
- Domain
- illumifin.com
Incident
- Discovered
- Nov 4, 2025
- Materiality determined
- —
- Notification sent
- Mar 31, 2026
- Affected individuals
- 15
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.