Social EngineeringProfessional ServicesProfessional ServicesPhishingTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Eisen Machinery Inc

bd_93075686bc85b479 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 16, 2025

Filed

Jun 24, 2026

To disclose

27 weeks

Affected

1state residents only

Linked

3 filings

Confidence

65%

Full breach record for Eisen Machinery Inc →

Eisen, Inc. notified the New Hampshire Attorney General of a data event affecting one NH resident. On Dec 12, 2025, a threat actor impersonated the CA State Controller's Office via social engineering to obtain unclaimed property records containing names, SSNs, DOBs, and financial balances. Eisen identified the fraud on Dec 16, 2025, revoked access, deleted the file, and conducted a forensic review. Remediation included secondary verification protocols and staff training. 24 months of credit monitoring via Experian was provided.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 27 weeks / 190 days

Dec 12, 2025

Begins

Dec 16, 2025

Discovered

Jun 24, 2026

Filed

vs. sector median

+8 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_3ae29966dab1856c2026-06-24Candidate
California State AGbd_f47b90c8af94342b2026-06-24Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Eisen Machinery Inc
norm: eisen machinery
Domain: eisenm.com
Industry: Professional Servicesllm

Discovered: Dec 16, 2025
Breach occurred: Dec 12, 2025 – Dec 16, 2025
Undetected for: 4 daysoccurrence → discovery
Materiality determined: Jun 24, 2026
Notification sent: Jun 24, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Promptly revoked the unauthorized party's access to the shared file
Deleted the file from the file-sharing platform
Conducted a forensic review confirming no lateral movement or broader system compromise
Implemented mandatory secondary verification protocols for all government data requests
Deployed additional specialized training on cybersecurity practices and regulator impersonation tactics
Provided access to credit monitoring services for 24 months through Experian
Changes made: Implemented mandatory secondary verification protocols for all government data requests
Deployed additional specialized training on cybersecurity practices and regulator impersonation tactics
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(190 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJun 24 · first

California State AGJun 24 · first

New Hampshire State AGJun 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/eisen-20260624.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 24, 2026
Raw hash: 44e17e9c4f5d34b3abeaea19dd984e46b2ca6b9e9d6a74f6c6bbf59e9ac1681b

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityEisen Machinery Inc

Incidentdiscovered Dec 16, 2025

Stated responsePromptly revoked the unauthorized party's access to the shared file

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov