Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
CHP 11-99 Foundation
bd_8968a5af3b4076c4 · schema v1 · pii pii-v1
Full breach record for CHP 11-99 Foundation →CHP 11-99 Foundation notified the New Hampshire Attorney General of a data incident affecting one NH resident. A staff member clicked a phishing link on September 16, 2025, after a third-party help desk incorrectly cleared it. The attacker accessed the staff member's email, exposing membership applications, payment forms (bank/credit card info), names, addresses, and SSNs. The foundation is working with incident response vendors, implemented MFA, changed passwords, and plans to change its IT provider. Notification to the resident was scheduled for January 30, 2026.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_abf1655a014ba033California State AGfiled 2026-01-23(3d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/chp-11-foundation-20260120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 20, 2026
- Raw hash
- c272107ffc9394081cff2485ed4da03581f9d88478e844d1b910a505d1a5aa4c
Reporting entity
- Name
- CHP 11-99 Foundationnorm: chp 11 99
Victim entity
- Name
- CHP 11-99 Foundationnorm: chp 11 99
Incident
- Discovered
- Sep 24, 2025
- Materiality determined
- —
- Notification sent
- Jan 30, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 17 weeks(118 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.