HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Expert Metal Finishing Solutions
bd_98d7cf312131d892 · schema v1 · pii pii-v1
Full breach record for Expert Metal Finishing Solutions →AOTCO Metal Finishing, LLC notified the New Hampshire Attorney General on May 12, 2026, of a cybersecurity incident discovered on March 27, 2026. A threat actor accessed and exfiltrated files containing personal information of 17 New Hampshire residents, including SSNs, driver's license numbers, payroll, 401(k), tax forms, and health insurance data. AOTCO engaged forensic investigators, disabled the network and VPN, reset passwords, and provided 24 months of free credit monitoring and identity theft protection.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8010a5b7e074cd92Massachusetts State AGfiled 2026-05-01(11d gap)Candidate
- bd_935c72dfcf3d60eeMassachusetts State AGfiled 2026-05-01(11d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/aotco-metal-finishing-20260512.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2026
- Raw hash
- 8adca1db82f72c27e34b3ccb2a4dc39a2dfe8bf98ee910376184e0e2085ffb10
Reporting entity
- Name
- Expert Metal Finishing Solutionsnorm: expert metal finishing
- Domain
- aotco.com
Victim entity
- Name
- Expert Metal Finishing Solutionsnorm: expert metal finishing
- Domain
- aotco.com
Incident
- Discovered
- Mar 27, 2026
- Materiality determined
- —
- Notification sent
- May 6, 2026
- Affected individuals
- 17
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.