HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
TouchSource
bd_9938ee43ed66efc4 · schema v1 · pii pii-v1
Full breach record for TouchSource →TouchSource, LLC experienced unauthorized network access on or around March 13, 2026. An investigation concluded July 6, 2026, revealing that full names and Social Security numbers were exfiltrated. TouchSource offered complimentary Equifax credit monitoring to affected individuals. No identity fraud was known at the time of notification.
Massachusetts clock✗ MA AG >90d16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1182-touchsource/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- ecb5e50c450bc8687666d41420ba063d3d6f21b6121003a284a82ad8796bab71
Reporting entity
- Name
- TouchSourcenorm: touchsource
- Domain
- touchsource.com
Victim entity
- Name
- TouchSourcenorm: touchsource
- Domain
- touchsource.com
Incident
- Discovered
- Mar 13, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(110 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.