HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Memberclose LLC
bd_80c826d6a50e264f · schema v1 · pii pii-v1
Full breach record for Memberclose LLC →Memberclose, LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting 130 NH residents. Unauthorized access to a cloud application occurred around October 29, 2025, detected on October 30, 2025. Personal information including names, SSNs, and DOBs was exfiltrated. Memberclose engaged forensic investigators, secured the application, and provided 24 months of Kroll identity monitoring to affected individuals. Notifications were sent to residents on January 15, 2026.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_152b61b1bbabe4efMaine State AGfiled 2026-01-15(5d gap)Candidate
- bd_67e63e1fc12946ceVermont State AGfiled 2026-01-15(5d gap)Verified
- bd_83cd25f40fe6fedbIndiana State AGfiled 2026-01-15(5d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/memberclose-20260120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 20, 2026
- Raw hash
- 898c8f9a23a9654362353014c8f0f644f773aa2c4fa5b6dbe4da3030be52857e
Reporting entity
- Name
- McDonaldnorm: mcdonald
- Domain
- mcdonalds-menus.us
Victim entity
- Name
- Memberclose LLCnorm: memberclose
Incident
- Discovered
- Oct 30, 2025
- Materiality determined
- —
- Notification sent
- Jan 15, 2026
- Affected individuals
- 130
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General, Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.