HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
System Pavers, LLC
bd_91b6bf606c4f3150 · schema v1 · pii pii-v1
Full breach record for System Pavers, LLC →System Pavers, LLC notified New Hampshire residents of a data breach where an unauthorized actor accessed data between Sept 20 and Oct 4, 2024. The company discovered suspicious activity on Oct 4, 2024, and completed its review on Feb 4, 2025. Two NH residents were notified. Personal information was compromised. System Pavers notified law enforcement, offered credit monitoring, and is implementing additional safeguards.
Leak gap clock⏱ Leak >90d21 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 138 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_1f021b0d167b06e9Maine State AGfiled 2025-03-03Candidate
- bd_bbb0efd5ba9e8156Indiana State AGfiled 2025-03-03Verified
- bd_cc55ed385acd3f30Montana State AGfiled 2025-03-03Verified by operator
- bd_cd54a289f084b76cCalifornia State AGfiled 2025-03-03Verified
Show 2 more filings ↓Show fewer ↑
- bd_cf4bc501bf75555bMaryland State AGfiled 2025-03-03Verified
- bd_ef56d9c0df4e3598Oregon State AGfiled 2025-03-03Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/system-pavers-20250303.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2025
- Raw hash
- 0b53f63ee004fbc00d9115c5b7baafe79edd6471dea993cc11064db89e4d0226
Reporting entity
- Name
- System Pavers, LLCnorm: system pavers
- Domain
- systempavers.com
Victim entity
- Name
- System Pavers, LLCnorm: system pavers
- Domain
- systempavers.com
Incident
- Discovered
- Oct 4, 2024
- Materiality determined
- Feb 4, 2025
- Notification sent
- Mar 3, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to other relevant state regulators, as necessary, and to the three major credit reporting agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.