HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

MTI America

bd_90cef9b31e4d3425 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 10, 2025

Filed

Feb 6, 2026

To disclose

17 weeks

Affected

5state residents only

Linked

4 filings

Confidence

66%

Full breach record for MTI America →

MTI America, LLC notified the New Hampshire Attorney General of a security breach involving unauthorized access to its network between September 6 and 9, 2025. The incident was discovered on October 10, 2025. The breach affected five New Hampshire residents, whose names and Social Security numbers were potentially accessed. MTI notified affected individuals on February 6, 2026, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d17 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 34 days

discovery → filing · 17 weeks / 119 days

Sep 6, 2025

Begins

Oct 10, 2025

Discovered

Feb 6, 2026

Filed

vs. sector median

2 wks faster

This filing is one of 4 about the same incident.View merged incident

A leak claim by sinobi about this victim predates this filing by 120 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitesinobibd_e898cae9d7a9cceb2025-10-08 · +120dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_387a56cc7a6df8f02026-02-06Candidate
Massachusetts State AGbd_a3191e129d9a5bc82026-02-06Verified

Name: MTI America
norm: mti america
Domain: mtiamerica.com

Name: MTI America
norm: mti america
Domain: mtiamerica.com
Industry: Technologyllm

Discovered: Oct 10, 2025
Breach occurred: Sep 6, 2025 – Sep 9, 2025
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 6, 2026
Affected individuals: 5state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Began an investigation
Engaged third-party specialists
Engaged third-party data review specialists
Began a comprehensive internal analysis of the files at issue
Notified potentially impacted individuals of this incident via First Class mail
Offering the potentially impacted residents of New Hampshire access to 12 months of complimentary credit monitoring and identity protection services
Implemented additional technical measures to further secure its systems
Changes made: Implemented additional technical measures to further secure its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(119 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGFeb 6 · first

Massachusetts State AGFeb 6 · first

New Hampshire State AGFeb 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mti-america-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 6, 2026
Raw hash: c6bbe5aff030ddb9fa50c6232d7e75d2b731d95404c3152ad3badb67b783906b

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityMTI America

Victim entityMTI America

Incidentdiscovered Oct 10, 2025

Stated responseBegan an investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov