HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICHighContained
Cove USA
bd_6f775e212b7c0fe3 · schema v1 · pii pii-v1
Full breach record for Cove USA →Cove Risk Services, LLC notified the New Hampshire Attorney General of a data breach affecting 5,063 state residents. Unauthorized access occurred around May 3, 2025, following a network disruption. Impacted data included names, DOB, driver's license, SSN, financial account, and health information. The company engaged forensic specialists, notified law enforcement, and offered 12 months of credit monitoring. Notices were mailed starting December 12, 2025.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_8c4f3c3ea44b8387Indiana State AGfiled 2025-12-12(10d gap)Candidate
- bd_ca1c8f7dccf3fd10Vermont State AGfiled 2025-12-12(10d gap)Verified
- bd_f8b2a16b164920deNew Hampshire State AGfiled 2026-01-30(39d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cove-risk-20251222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2025
- Raw hash
- 038a302921d9478dfcef6577d8d1dee30169aa72cc72c777e5cb5f926af913b4
Reporting entity
- Name
- Cove USAnorm: cove usa
- Domain
- shopcoveusa.com
Victim entity
- Name
- Cove USAnorm: cove usa
- Domain
- shopcoveusa.com
Incident
- Discovered
- May 5, 2025
- Materiality determined
- —
- Notification sent
- Dec 12, 2025
- Affected individuals
- 5,063
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 33 weeks(231 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.