HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Magenta Holdco GP, LLC
bd_8603a20c9181ece2 · schema v1 · pii pii-v1
Full breach record for Magenta Holdco GP, LLC →GreenSky (Magenta Holdco GP, LLC) notified the NH AG of a data event affecting 14 NH residents. Unauthorized access to customer databases occurred Aug 13-18, 2025, via a third-party vendor (Salesloft Drift). Data exposed: names and SSNs. Notification sent Oct 29, 2025. Response included law enforcement notification, vendor termination, forensic investigation, and 2-year credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4b79495cb7ececd0Montana State AGfiled 2025-10-29Candidate
- bd_e0d1e6d8cf8a3ea5Indiana State AGfiled 2025-10-29Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/magenta-holdco-greensky-20251029.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2025
- Raw hash
- a1f2dd3e0dcd9c4601e370f8b0fc0de4f748a43c4d706bae95bdf078a3d41259
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Magenta Holdco GP, LLCnorm: magenta holdco gp
Incident
- Discovered
- Aug 21, 2025
- Materiality determined
- —
- Notification sent
- Oct 29, 2025
- Affected individuals
- 14
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProviding written notice of this incident to relevant state and federal regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.