Baldwin EMC
bd_711f227ea96c99b8 · schema v1 · pii pii-v1
Full breach record for Baldwin EMC →EMC Water, LLC notified the New Hampshire Attorney General of a security incident involving Oracle E-Business Suite. An external actor exploited a previously unknown vulnerability (zero-day) in Oracle EBS to exfiltrate data between August 9 and 18, 2025. EMC Water learned of the incident in late November 2025. The breach affected 112 New Hampshire residents, exposing names and Social Security numbers. Notification letters were mailed on January 26, 2026, offering one year of credit monitoring. EMC Water applied the relevant Oracle patch and engaged third-party cybersecurity professionals and law enforcement.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_42f1cc70c0dcd23dIndiana State AGfiled 2026-01-26Candidate
- bd_5ce28ef0e2f0ca3aMaine State AGfiled 2026-01-26Verified
- bd_83d77a5c526ef283Vermont State AGfiled 2026-01-26Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/emc-water-20260126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2026
- Raw hash
- 52068b421e0a37921c83f17c93fa76439466bc21fa557784f51ba4f70b648900
Reporting entity
- Name
- Baldwin EMCnorm: baldwin emc
- Domain
- baldwinemc.com
Victim entity
- Name
- Baldwin EMCnorm: baldwin emc
- Domain
- baldwinemc.com
Incident
- Discovered
- Nov 1, 2025
- Materiality determined
- —
- Notification sent
- Jan 26, 2026
- Affected individuals
- 112
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(86 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.