Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumContained
Genex Services, LLC
bd_8a7a15ccb343c3bd · schema v1 · pii pii-v1
Full breach record for Genex Services, LLC →Genex Services, LLC reported a phishing attack on February 25, 2025, compromising two employee laptops. The incident exposed personal information, including names, SSNs, driver's license numbers, and financial data, of 11 New Hampshire residents. Genex engaged third-party experts, notified the FBI, and offered 24 months of Kroll identity monitoring. Notices were mailed on July 9, 2025.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_6e7b15e133927c7eIndiana State AGfiled 2025-07-09Verified
- bd_b44cde439e08d4f8California State AGfiled 2025-07-09Verified
- bd_5754f2b8af0cb57bTexas State AGfiled 2025-07-10(1d gap)Candidate
- bd_67a39fbd2dc3f748Vermont State AGfiled 2025-07-10(1d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_e6724d8301e225b9Maine State AGfiled 2025-07-10(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/genex-20250709.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 9, 2025
- Raw hash
- bca97e1c2e08ce86f3f1507f8a2aab6e9b15bb54baa1846843e82f85393cd303
Reporting entity
- Name
- Genex Services, LLCnorm: genex services
Victim entity
- Name
- Genex Services, LLCnorm: genex services
Incident
- Discovered
- Feb 25, 2025
- Materiality determined
- —
- Notification sent
- Jul 9, 2025
- Affected individuals
- 11
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 weeks(134 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.