HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Retail Merchandising Services
bd_8b6088668f73e239 · schema v1 · pii pii-v1
Full breach record for Retail Merchandising Services →Retail Merchandising Services (RMS) notified the New Hampshire Attorney General of a data event involving unauthorized access to one email account between November 24, 2025, and January 7, 2026. The breach affected 59 New Hampshire residents, exposing names, dates of birth, Social Security numbers, and financial account/routing numbers. RMS engaged forensic specialists, enhanced security policies, and provided 12 months of complimentary credit monitoring to affected individuals. Notifications were sent starting March 16, 2026.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_57d871b5dbe862fcIndiana State AGfiled 2026-03-16Candidate
- bd_8088c616f118bbf5Vermont State AGfiled 2026-03-16Verified
- bd_a16a5123a81032b3Maine State AGfiled 2026-03-16Verified
- bd_c02a0cfcf849ffb8Indiana State AGfiled 2026-03-16Candidate
Show 1 more filing ↓Show fewer ↑up to 1d gap
- bd_1114ef972c81c7abTexas State AGfiled 2026-03-17(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/retail-merchandising-services-20260316.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2026
- Raw hash
- 69ec3efe2cdbf90353d3dee8e223139b472bc96459e9dcdaa872645922316844
Reporting entity
- Name
- Julie Siebert-Johnson, Esq. (on behalf of Retail Merchandising Services)norm: julie siebert johnson esq on behalf of retail merchandising
Victim entity
- Name
- Retail Merchandising Servicesnorm: retail merchandising
Incident
- Discovered
- Jan 1, 2026
- Materiality determined
- —
- Notification sent
- Mar 2, 2026
- Affected individuals
- 59
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Office of the Attorney General of New Hampshire
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(74 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.