HackingProfessional ServicesProfessional ServicesStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

New Hampshire Coalition Against Domestic and Sexual Violence

bd_9779a6dfabbcfec8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2025

Filed

Feb 20, 2025

To disclose

20 days

Affected

10state residents only

Confidence

63%

Full breach record for New Hampshire Coalition Against Domestic and Sexual Violence →

NH Coalition Against Domestic and Sexual Violence notified the NH Attorney General of a security breach affecting a staff member's work email account on January 31, 2025. The account was quickly discovered and isolated by their IT provider. Personal information potentially obtained includes legal names, addresses, phone numbers, email addresses, social security numbers, dates of birth, and bank account information. Ten individuals were affected and notified.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 days

Jan 31, 2025

Begins

Jan 31, 2025

Discovered

Feb 20, 2025

Filed

vs. sector median

16 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10 affectedView incident

Name: New Hampshire Coalition Against Domestic and Sexual Violence
norm: new hampshire coalition against domestic and sexual violence
Domain: nhcadsv.org

Name: New Hampshire Coalition Against Domestic and Sexual Violence
norm: new hampshire coalition against domestic and sexual violence
Domain: nhcadsv.org
Industry: Professional Servicesllm

Discovered: Jan 31, 2025
Breach occurred: Jan 31, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 12, 2025
Affected individuals: 10state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified NH Department of Justice Consumer Protection and Antitrust Bureau
Initial access: valid_credentials

During the incident: Isolated the breached email account
Working with information technology vendor to ensure this type of security breach does not happen again
Changes made: Working with information technology vendor to ensure this type of security breach does not happen again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nh-coalition-against-domestic-sexual-violence-20250220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2025
Raw hash: f1cebe4bedd609587d0cdfdc446e4cfcc22fe2dddb303ce9c729ce52dae9bf0e

Reporting entityNew Hampshire Coalition Against Domestic and Sexual Violence

Victim entityNew Hampshire Coalition Against Domestic and Sexual Violence

Incidentdiscovered Jan 31, 2025

Stated responseIsolated the breached email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov