HackingCustomer Data InvolvedPIIIDENTITY_GOVERNMENTMediumContained
Melwood Inc
bd_94b45510195fb47a · schema v1 · pii pii-v1
Full breach record for Melwood Inc →Melwood, Inc. notified the New Hampshire Attorney General of a data event affecting approximately 3 New Hampshire residents. Between August 9 and 17, 2025, an unknown cyber actor accessed Melwood's network and copied files containing names and Social Security numbers. Melwood notified federal law enforcement, provided 12 months of complimentary credit monitoring via TransUnion/Cyberscout, and updated internal policies.
Leak gap clock⏱ Leak >90d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 2 about the same incident.View merged incident
A leak claim by sinobi about this victim predates this filing by 139 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_358415406c58746aVermont State AGfiled 2026-01-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/melwood-20260126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2026
- Raw hash
- c0ac1cba53d4bcdf47180f32df817b558b00c7938ae0c759a713f9afc88f7567
Reporting entity
- Name
- Melwood Incnorm: melwood
- Domain
- melwood.org
Victim entity
- Name
- Melwood Incnorm: melwood
- Domain
- melwood.org
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Jan 26, 2026
- Affected individuals
- 3
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified regulators in jurisdictions in which it conducts business
Compliance
- Compliance flags
- Leak >90d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.