MalwareRetail & ConsumerRetailRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Titan Roofing, Inc.

bd_901fca84ff8be9c0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 31, 2025

Filed

Mar 20, 2026

To disclose

20 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Titan Roofing, Inc. →

Titan Roofing, Inc. notified the New Hampshire Attorney General on March 20, 2026, of a ransomware incident affecting one NH resident. Unauthorized access occurred on or about October 24, 2025, and was discovered on October 31, 2025. The incident involved encryption of files and potential access to names, SSNs, driver's license numbers, and financial account information. Titan engaged law enforcement, took systems offline, and provided 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 20 weeks / 140 days

Oct 24, 2025

Begins

Oct 31, 2025

Discovered

Mar 20, 2026

Filed

vs. sector median

+10 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_0d9afd4f95759ec92026-03-20Candidate
Massachusetts State AGbd_1b930ba1648651072026-03-20Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Titan Roofing, Inc.
norm: titan roofing
Industry: Retail & Consumerllm

Discovered: Oct 31, 2025
Breach occurred: Oct 24, 2025
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 20, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Began an investigation, to determine the nature and scope of the incident
Took its environment offline
Reviewed the information on those systems to confirm what information is contained within, and to whom it relates
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for twenty-four (24) months, through Experian
Changes made: Reviewing and improving our policies, procedures, and processes to strengthen our security posture moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(140 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGMar 20 · first

Massachusetts State AGMar 20 · first

New Hampshire State AGMar 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/titan-roofing-20260320.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 20, 2026
Raw hash: bc12415ee8463629bc296031dc192c3c38e181cbce6dea093d160c3b79e34062

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityTitan Roofing, Inc.

Incidentdiscovered Oct 31, 2025

Stated responseBegan an investigation, to determine the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov