HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

OAK VIEW GROUP

bd_732c2edcff5cfdf3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 19, 2026

Filed

Jun 15, 2026

To disclose

21 weeks

Affected

18state residents only

Linked

5 filings

Confidence

66%

Full breach record for OAK VIEW GROUP →2 incidents on file

Oak View Group notified the New Hampshire Attorney General of a cybersecurity incident discovered on January 19, 2026. An unauthorized actor gained access to a subset of OVG's legacy systems on December 16, 2025, and exfiltrated the name and tax identification numbers of approximately 18 New Hampshire residents. OVG took the affected system offline, engaged forensic experts, and notified law enforcement. Affected individuals received notification on June 12, 2026, and were offered 24 months of credit monitoring through TransUnion/Cyberscout. The incident status is contained.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 34 days

discovery → filing · 21 weeks / 147 days

Dec 16, 2025

Begins

Jan 19, 2026

Discovered

Jun 15, 2026

Filed

vs. sector median

+2 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_d4731c7f919c432d2026-06-13 · +2dCandidate
Texas State AGbd_286d4bc0b1f32c4e2026-06-18 · +3dVerified
Nebraska State AGbd_59f53baa252456cd2026-06-12 · +3dVerified
Indiana State AGbd_952ac689798d53152026-06-12 · +3dVerified

Name: OAK VIEW GROUP
norm: oak view

Name: OAK VIEW GROUP
norm: oak view
Industry: Professional Servicesllm

Discovered: Jan 19, 2026
Breach occurred: Dec 16, 2025
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 12, 2026
Affected individuals: 18state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Provided notice to the Office of the Attorney General Consumer Protection Bureau

During the incident: Took the affected environment offline
Activated its incident response plan
Launched an investigation
Engaged outside cybersecurity experts
Notified law enforcement
Established a dedicated call center
Offered 24 months of complimentary credit monitoring and identity theft protection services through TransUnion
Changes made: Rebuilt the compromised environment in a clean state with updated patching and enhanced endpoint detection and response capabilities
Disabled all accounts in the affected system
Created new accounts only on an as-needed basis
Scanned its other environments for indicators of compromise
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(147 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJun 12 · first

Indiana State AGJun 12 · first

Massachusetts State AG+1d

New Hampshire State AG+3d · this page

Texas State AG+6d

Pattern: first filing Jun 12 (NE), last Jun 18 (TX) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/oak-view-group-20260615.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 15, 2026
Raw hash: ec7348212d98e093e11c2b0a437c8d6313b5f929181e90e4845fd03cc6a178e2

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityOAK VIEW GROUP

Victim entityOAK VIEW GROUP

Incidentdiscovered Jan 19, 2026

Stated responseTook the affected environment offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov