HackingStolen CredentialsTargetedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Unity Software Inc.
bd_6e15c32a27b5e3e7 · schema v1 · pii pii-v1
Full breach record for Unity Software Inc. →Unity Technologies notified the NH AG of a security incident affecting 3 NH residents. Unauthorized code was inserted into the SpeedTree checkout page between March 13 and August 26, 2025, capturing names, addresses, emails, and credit card numbers. Unity detected the incident on August 26, 2025, took the site offline, and engaged external cybersecurity specialists. Remediation includes enhanced monitoring and credit monitoring services for affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4467eae67fa1f0a7Maine State AGfiled 2025-10-09Candidate
- bd_46916c660957386dIndiana State AGfiled 2025-10-02(7d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/unity-technologies-20251009.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 9, 2025
- Raw hash
- deab61b7520930cdcf071696cbfaea053910e3520b0c5f2da5df4e7507307ce2
Reporting entity
- Name
- Troutman Pepper Locke, LLPnorm: troutman pepper locke
Victim entity
- Name
- Unity Software Inc.norm: unity software
- Domain
- unity.com
Incident
- Discovered
- Aug 26, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 3
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.