HackingManufacturingManufacturingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

ROLAND MACHINERY COMPANY

bd_8d84f688fd994987 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 29, 2026

Filed

Jul 8, 2026

To disclose

6 weeks

Affected

4state residents only

Linked

7 filings

Confidence

66%

Full breach record for ROLAND MACHINERY COMPANY →

Roland Machinery Company notified NH AG of a data security incident where unauthorized access occurred May 28-29, 2026. Data exfiltrated May 29, confirmed June 9. Affected 4 NH residents with PII (SSN, DL, financial info). Company contained incident, engaged forensics, notified law enforcement, and offered 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 weeks / 40 days

May 28, 2026

Begins

May 29, 2026

Discovered

Jul 8, 2026

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitetermitebd_2c66e39033a058a52026-06-08 · +30dVerified by operator

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_e64f073b020a32272026-07-08Verified
Vermont State AGbd_76254b0a419c6a9e2026-07-07 · +1dVerified
Massachusetts State AGbd_f1adee0cd1a91e5a2026-07-07 · +1dVerified
New Hampshire State AGbd_06308f31a604206e2026-07-15 · +7dVerified

Show 1 more filing ↓up to 7d gap

Illinois State AGbd_b8b5511262f010ae2026-07-01 · +7dCandidate

Name: ROLAND MACHINERY COMPANY
norm: roland machinery
Domain: rolandmachinery.com

Name: ROLAND MACHINERY COMPANY
norm: roland machinery
Domain: rolandmachinery.com
Industry: Manufacturingllm

Discovered: May 29, 2026
Breach occurred: May 28, 2026 – May 29, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 8, 2026
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, State of New Hampshire
Initial access: valid_credentials

During the incident: Immediately contained the incident
Initiated incident response procedures
Secured affected systems
Engaged independent cybersecurity specialists for forensic investigation
Notified law enforcement
Changes made: Taken a number of technical and administrative steps to further enhance the security of its systems and its customer data
Offering New Hampshire residents twelve (12) months of complimentary credit monitoring services through IDX
Ninety (90) days of access to a call center
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Illinois State AGJul 1 · first

Vermont State AG+6d

Massachusetts State AG+6d

Nebraska State AG+7d

New Hampshire State AG+7d · this page

New Hampshire State AG+14d

Pattern: first filing Jul 1 (IL), last Jul 15 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/roland-machinery-company-20260708.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2026
Raw hash: bc0da1e6e76063c88da151d6a89c64e38e512ec59e45f74562cf01cfd771e875

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityROLAND MACHINERY COMPANY

Victim entityROLAND MACHINERY COMPANY

Incidentdiscovered May 29, 2026

Stated responseImmediately contained the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov