HackingOtherData ExfiltratedCustomer Data InvolvedPIIPHIIdentity (basic)Health (basic)LowContained

T.A. Solberg Co., Inc.

bd_97ac3425a138d5f8 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 3, 2026

Filed

Jul 6, 2026

To disclose

18 weeks

Affected

1state residents only

Linked

5 filings

Confidence

67%

Full breach record for T.A. Solberg Co., Inc. →

T.A. Solberg Co., Inc. notified the NH Attorney General of unauthorized access to its network identified on March 3, 2026. An external actor viewed and obtained files containing personal information and protected health information. One New Hampshire resident was affected. The company engaged a cybersecurity firm, took systems offline, and offered identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 125 days

Mar 3, 2026

Discovered

Jul 6, 2026

Filed

vs. sector median

+12 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_00fbd492164fbdee2026-07-06Verified
Massachusetts State AGbd_3985d0325f0b27982026-07-06Verified
HHS OCRbd_4ac2d065fe5b17292026-07-07 · +1dCandidate
Indiana State AGbd_9e294ecfce3c8cb52026-07-02 · +4dCandidate

Name: T.A. Solberg Co., Inc.
norm: ta solberg

Name: T.A. Solberg Co., Inc.
norm: ta solberg
Industry: Otherllm

Discovered: Mar 3, 2026
Materiality determined: —
Notification sent: Jul 2, 2026
Affected individuals: 1state-resident count only
Data types: PIIPHIIdentity (basic)Health (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Implemented incident response protocols
Took certain systems offline
Engaged a cybersecurity firm to assist with the investigation
Reviewed files to determine affected individuals
Provided written notice to affected New Hampshire resident
Offered complimentary identity monitoring services
Changes made: Working with IT professionals to further enhance the security of its systems
Continuing to review its network security
Updating policies and procedures as appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(125 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJul 2 · first

Vermont State AG+4d

Massachusetts State AG+4d

New Hampshire State AG+4d · this page

HHS OCR+5d

Pattern: first filing Jul 2 (IN), last Jul 7 (WI) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ta-solberg-20260706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2026
Raw hash: bf30ecf48e28e6653fbda3b7c834c886d747bc5e51cda58d78f8c1afb53db49d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityT.A. Solberg Co., Inc.

Victim entityT.A. Solberg Co., Inc.

Incidentdiscovered Mar 3, 2026

Stated responseImplemented incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov