HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Mister Guns
bd_8603fb9c5608cd4a · schema v1 · pii pii-v1
Full breach record for Mister Guns →Mister Guns notified the New Hampshire Attorney General of unauthorized network access occurring on or about November 14, 2025. The incident affected approximately 7 New Hampshire residents, exposing full names and driver's license numbers. The company engaged external cybersecurity professionals and legal counsel, confirmed the data scope on February 25, 2026, and began notifying affected individuals on March 31, 2026, offering credit monitoring services.
Leak gap clock⏱ Leak >90d20 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by securotrop about this victim predates this filing by 136 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_4764204dd81c8d49Leak Sitesecurotropfiled 2025-11-21(136d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_8ffd4b1c42ca7b81Maine State AGfiled 2026-04-01(5d gap)Verified
- bd_add46516093b4ca8Texas State AGfiled 2026-06-02(57d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mister-guns-20260406.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 6, 2026
- Raw hash
- 94ba59be922bb7b8a022abfef9f52754a83759eb82e9d836992da99496d752fd
Reporting entity
- Name
- MCDONALD HOPKINS LLCnorm: mcdonald hopkins
Victim entity
- Name
- Mister Gunsnorm: mister guns
- Domain
- misterguns.com
Incident
- Discovered
- Nov 14, 2025
- Materiality determined
- —
- Notification sent
- Mar 31, 2026
- Affected individuals
- 7
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 weeks(143 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.