HackingManufacturingManufacturingVulnerability ExploitData ExfiltratedCustomer Data InvolvedTargetedGovernment IDIdentity (basic)MediumContained

Fluke Process Instruments

bd_8c34ff6ba42b5c91 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2025

Filed

May 18, 2026

To disclose

33 weeks

Affected

175state residents only

Linked

10 filings

Confidence

66%

Full breach record for Fluke Process Instruments →2 incidents on file

Fluke Corporation, a manufacturing business, notified the New Hampshire Department of Justice on May 18, 2026, of a security incident affecting 175 current or former employees. A criminal actor exploited a vulnerability in a third-party application to access Fluke's network between August 10, 2025, and October 7, 2025. Fluke discovered the breach on September 29, 2025. Affected data included Social Security numbers, dates of birth, and disability status indicators. Fluke engaged forensic investigators, ejected the actor, patched the vulnerability, reset passwords, and deployed enhanced monitoring tools. Credit monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 50 days

discovery → filing · 33 weeks / 231 days

Aug 10, 2025

Begins

Sep 29, 2025

Discovered

May 18, 2026

Filed

vs. sector median

+22 wks slower

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_72002bb817afd9dc2026-07-01 · +44dVerified by operator

Regulatory filings (8) · sorted by filing gap

Nebraska State AGbd_3be9bd69158105022026-05-15 · +3dVerified
Montana State AGbd_4b1eda5824917eb32026-05-15 · +3dVerified
Texas State AGbd_c577591a34e2a9f72026-05-15 · +3dVerified by operator
Massachusetts State AGbd_f303f7e614c53e9c2026-05-15 · +3dVerified by operator

Show 4 more filings ↓up to 53d gap

Indiana State AGbd_fe9ebc44bee9b4ce2026-05-15 · +3dVerified by operator
Washington State AGbd_3fd89a2eda6622b92026-05-14 · +4dVerified by operator
Vermont State AGbd_85f3ddcbbdc8bd092026-05-13 · +5dVerified by operator
Texas State AGbd_ce33113ba7b92d6d2026-07-10 · +53dCandidate

Name: Dentons US LLP
norm: dentons us

Name: Fluke Process Instruments
norm: fluke process instruments
Domain: flukeprocessinstruments.com
Industry: manufacturing
Industry: Manufacturingllm

Discovered: Sep 29, 2025
Breach occurred: Aug 10, 2025 – Oct 7, 2025
Undetected for: 50 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 18, 2026
Affected individuals: 175state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Launched a thorough investigation with the support of a leading cybersecurity firm
Engaged a leading data forensics firm to analyze the contents of the data that may have been accessed without authorization
Ejecting the criminal actor from their network
Patching the vulnerability promptly after the third-party made a patch available
Resetting administrative passwords
Removing malicious accounts
Ensuring no credentials were stolen or compromised
Deploying an endpoint detection and response tool with host-based detection and response capabilities on the host side
Deploying a firewall management platform for network control and situational awareness
Changes made: Patching the vulnerability promptly after the third-party made a patch available
Resetting administrative passwords
Removing malicious accounts
Deploying an endpoint detection and response tool with host-based detection and response capabilities on the host side
Deploying a firewall management platform for network control and situational awareness
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(231 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Vermont State AGMay 13 · first

Washington State AG+1d

Nebraska State AG+2d

Montana State AG+2d

Texas State AG+2d

Massachusetts State AG+2d

Indiana State AG+2d

New Hampshire State AG+5d · this page

Texas State AG+58d

Pattern: first filing May 13 (VT), last Jul 10 (TX) — a 58-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fluke-corporation-20260518.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 18, 2026
Raw hash: 5a96fa8f2c360d485a64b69bd169942299be66dc30b988ce2f227710958ad699

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityDentons US LLP

Victim entityFluke Process Instruments

Incidentdiscovered Sep 29, 2025

Stated responseLaunched a thorough investigation with the support of a leading cybersecurity firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov