HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
WEL Companies
bd_8ab1eb735d17368f · schema v1 · pii pii-v1
Full breach record for WEL Companies →WEL Companies, Inc. notified the New Hampshire Attorney General of a data security incident discovered on January 31, 2025. Unauthorized access to WEL systems resulted in the potential acquisition of personal information, including names, Social Security numbers, and driver's license numbers, affecting 592 New Hampshire residents. Notifications were sent on November 18, 2025, offering complimentary identity protection services. No evidence of misuse was found.
Leak gap clock✗ Leak >180d42 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by ransomhub about this victim predates this filing by 292 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_54d6400fab04101cDelaware State AGfiled 2025-11-18(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wel-companies-20251119.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2025
- Raw hash
- 5f559c90e4d7d12ed9bcf5ddfa387e2136e1d25ed51cfea4b3622663072168ca
Reporting entity
- Name
- WEL Companiesnorm: wel companies
- Domain
- welcompanies.com
Victim entity
- Name
- WEL Companiesnorm: wel companies
- Domain
- welcompanies.com
Incident
- Discovered
- Jan 31, 2025
- Materiality determined
- —
- Notification sent
- Nov 18, 2025
- Affected individuals
- 592
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
Compliance
- Time to disclose
- 42 weeks(292 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.