MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Hertz Farm Management
bd_982bad4979fbb6c0 · schema v1 · pii pii-v1
Full breach record for Hertz Farm Management →Hertz Farm Management Inc. notified the New Hampshire Attorney General of a data event affecting 3 NH residents. The incident involved a network disruption on June 29, 2025, confirmed data exfiltration on July 3, 2025, and notification sent on December 9, 2025. Affected data included names, SSNs, and driver's license numbers. HFM disconnected its network, engaged investigators, reset passwords, reported to federal law enforcement, and offered 12 months of credit monitoring.
Leak gap clock⏱ Leak >90d24 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 6 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 173 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_401328525761e9e9Vermont State AGfiled 2025-12-09(6d gap)Verified
- bd_7160e8351f0d526eIowa State AGfiled 2025-12-09(6d gap)Candidate
- bd_d0808740f53b75d6Indiana State AGfiled 2025-12-09(6d gap)Verified
- bd_d1f1e5b491e1efaeMontana State AGfiled 2025-12-09(6d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 6d gap
- bd_f88960bda229a2a3Maine State AGfiled 2025-12-09(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hertz-farm-management-20251215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2025
- Raw hash
- faf874159e5797707e2e48cbbed5c9d1c14a06f3490e59604f4a12ea30c90d7a
Reporting entity
- Name
- The Kennedys Music Homepagenorm: the kennedys music homepage
- Domain
- kennedysmusic.com
Victim entity
- Name
- Hertz Farm Managementnorm: hertz farm management
- Domain
- hertz.ag
Incident
- Discovered
- Jun 29, 2025
- Materiality determined
- —
- Notification sent
- Dec 9, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.