HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
AILCO
bd_6c5086c2a4ac0cd7 · schema v1 · pii pii-v1
Full breach record for AILCO →Ailco Equipment Finance Group, Inc. notified the NH Attorney General of a breach involving its third-party provider, Kaaj Technologies Inc. Unauthorized access occurred on January 13, 2026, resulting in the copying of applicant data (names, addresses, SSNs) affecting 538 individuals, including 2 NH residents. Ailco learned of the incident on February 11, 2026. Notifications were mailed on March 26, 2026, offering 12 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3ec35e151f8c57bbVermont State AGfiled 2026-03-26Verified
- bd_9bf329650e4d359dIndiana State AGfiled 2026-03-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ailco-equipment-finance-group-20260326.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 26, 2026
- Raw hash
- 498bc86e240857c56890890521962976de3b64a76ae7961a3dfa91e8bc88700b
Reporting entity
- Name
- AILCOnorm: ailco
- Domain
- ailco.com
Victim entity
- Name
- AILCOnorm: ailco
- Domain
- ailco.com
Incident
- Discovered
- Feb 11, 2026
- Materiality determined
- —
- Notification sent
- Mar 26, 2026
- Affected individuals
- 538
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Third party
- via Kaaj Technologies Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.