HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
BMW FINANCIAL SERVICES NA, LLC
bd_819d74f937591393 · schema v1 · pii pii-v1
Full breach record for BMW FINANCIAL SERVICES NA, LLC →BMW Financial Services NA, LLC and BMW Bank of North America reported a data breach affecting 56 New Hampshire residents. The incident originated from a third-party service provider, AIS InfoSource LP, which experienced unauthorized access to its systems between February 16-21, 2025. BMW FS discovered the impact on its customer data on June 3, 2025. Compromised data included names, SSNs, and financial account numbers. Affected individuals were offered 12 months of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_6a83915b1ec3ffa3Texas State AGfiled 2025-07-08(6d gap)Verified
- bd_8e640f2e80dd8255Maine State AGfiled 2025-07-03(11d gap)Candidate
- bd_f9d9c1bab8b44badCalifornia State AGfiled 2025-07-03(11d gap)Verified
- bd_a00483d8d52831c0Indiana State AGfiled 2025-07-02(12d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bmw-financial-services-bank-north-america-20250714.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 14, 2025
- Raw hash
- 6fc129eb0e2df45eb9dbb457cf6e002a3a4991ad45bb7b0787eb92b12ed006ce
Reporting entity
- Name
- TAFT STETTINIUS & HOLLISTER LLPnorm: taft stettinius hollister
Victim entity
- Name
- BMW FINANCIAL SERVICES NA, LLCnorm: bmw financial services na
Incident
- Discovered
- Jun 3, 2025
- Materiality determined
- May 15, 2025
- Notification sent
- Jun 30, 2025
- Affected individuals
- 56
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Consumer Protection & Antitrust Bureau, Office of the Attorney General of New Hampshire
- Third party
- via AIS InfoSource LP
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.