MalwareFinancial ServicesFinanceRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Telcom Insurance Group

bd_80a3dc02e3a89868 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 19, 2025

To disclose

—

Affected

2state residents only

Linked

6 filings

Confidence

66%

Full breach record for Telcom Insurance Group →

Telcom Insurance Group experienced a ransomware attack on May 26, 2025, resulting in the encryption of servers and files containing names and Social Security numbers. The incident potentially affected two New Hampshire residents. The company launched an internal investigation, engaged third-party firms Mindcrest and TransUnion for analysis and location services, and is offering 12 months of identity theft monitoring through Kroll. Notifications to NH residents were sent on November 19, 2025.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

May 26, 2025

Begins

Nov 19, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelynxbd_dcc0d8949225e7662025-05-15 · +188dCandidate

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_34a691a64e5865b82025-11-19Verified by operator
Vermont State AGbd_65b156e4aa9615c12025-11-19Verified by operator
Montana State AGbd_98fb7d6761f94c2b2025-11-19Verified by operator
Indiana State AGbd_3755a81e91889f272025-08-08 · +103dVerified by operator

Name: Telcom Insurance Group
norm: telcom insurance group

Name: Telcom Insurance Group
norm: telcom insurance
Domain: telcominsgrp.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: May 26, 2025
Materiality determined: —
Notification sent: Nov 19, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Launched an internal investigation to understand the scope of the incident
Implemented enhanced security measures to prevent similar incidents from occurring in the future
Actively monitoring the web, including the Dark Web, to assess if any data has been leaked
Retained the data mining firm, Mindcrest, to analyze materials and identify any personal information that may have been exposed
Engaged TransUnion to locate current mailing addresses for the potentially affected individuals
Notified an initial group of affected individuals on August 8, 2025
Provided contact information for the major consumer reporting bureaus, state-specific regulators, and a 24-hour call center
Changes made: Offering 12 months of identity theft monitoring and restoration services through Kroll
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGAug 8 · first

Massachusetts State AG+103d

Vermont State AG+103d

Montana State AG+103d

New Hampshire State AG+103d · this page

Pattern: first filing Aug 8 (IN), last Nov 19 (NH) — a 103-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/telcom-insurance-group-20251119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 19, 2025
Raw hash: 649b8b0ea529f448cbfca32f0fc17fd9b93b96ba04b60ccb888f16a5bfdd2050

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityTelcom Insurance Group

Victim entityTelcom Insurance Group

IncidentRansomware

Stated responseLaunched an internal investigation to understand the scope of the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov