DisclosureLens
HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

TOO LOST LLC

bd_979e794526725f7b · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 10, 2026

Filed

Mar 26, 2026

To disclose

6 weeks

Affected

19state residents only

Linked

10 filings

Confidence

66%
Full breach record for TOO LOST LLC

Too Lost LLC submitted a supplemental notification to the New Hampshire Attorney General regarding a data security incident. The breach involved unauthorized access to a web application between July 25, 2025, and September 2, 2025. The incident affected 19 New Hampshire residents, exposing names and basic contact information (address, email, phone). The company engaged cybersecurity experts and law enforcement, confirmed data destruction by the attacker, and offered credit monitoring services.

Incident timeline

undetected · 200 days
discovery → filing · 6 weeks / 44 days

Jul 25, 2025

Begins

Feb 10, 2026

Discovered

Mar 26, 2026

Filed

vs. sector median

12 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filingsup to 34d gap

Filing propagation · 10 filings · 8 states

View merged incident ↗
Vermont State AGFeb 20 · first
California State AGFeb 20 · first
Indiana State AGFeb 20 · first
New Hampshire State AGFeb 20 · first
Nebraska State AGFeb 20 · first
Maine State AGFeb 20 · first
Indiana State AGFeb 20 · first
Massachusetts State AGFeb 20 · first
New Hampshire State AG+34d · this page

Pattern: first filing Feb 20 (VT), last Mar 26 (NH) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.