Rochester Philharmonic Orchestra
bd_87299a39b808c71e · schema v1 · pii pii-v1
Full breach record for Rochester Philharmonic Orchestra →Rochester Philharmonic Orchestra (RPO) notified the New Hampshire Attorney General of a data security incident affecting 2 New Hampshire residents. Unauthorized access occurred on October 21, 2025, when servers went offline. RPO engaged cybersecurity experts and determined on November 11, 2025, that specific network sections were accessed. Personal information, including names, SSNs, driver's licenses, health insurance, medical info, and passport numbers, may have been compromised. No evidence of misuse was found. RPO notified residents on May 27, 2026, and offered 12 months of credit monitoring and identity protection services through IDX.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b02eb26d4824fec9Vermont State AGfiled 2026-05-29Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/rochester-philharmonic-orchestra-20260529.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 29, 2026
- Raw hash
- 2f11697949bd91fd1290faf1d9bf3e2ddfb130b56528b762d172c582c61e2acd
Reporting entity
- Name
- Rochester Philharmonic Orchestranorm: rochester philharmonic orchestra
- Domain
- rpo.org
Victim entity
- Name
- Rochester Philharmonic Orchestranorm: rochester philharmonic orchestra
- Domain
- rpo.org
Incident
- Discovered
- Nov 11, 2025
- Materiality determined
- —
- Notification sent
- May 27, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 weeks(199 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.