HackingVulnerability ExploitZero-DaySupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSCREDENTIALSMediumContained
MASTEC, INC.
bd_9a55bbe733ae71cb · schema v1 · pii pii-v1
Full breach record for MASTEC, INC. →MasTec, Inc. notified the New Hampshire Attorney General of a security event affecting 18 NH residents (and 73 RI residents) involving unauthorized access via a zero-day vulnerability in a third-party solution. The incident occurred in August 2025, was detected in October 2025, and involved the exfiltration of names, SSNs, financial account details, and credentials. MasTec applied patches, engaged forensic experts, and mailed notices on June 5, 2026, offering credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_17006039c927389dVermont State AGfiled 2026-06-05(1d gap)Verified
- bd_2337a1feed74d7a4Indiana State AGfiled 2026-06-05(1d gap)Verified
- bd_d93b0d10e9a7baaeSouth Carolina State AGfiled 2026-06-05(1d gap)Verified
- bd_fa5d678c3d216037Massachusetts State AGfiled 2026-06-01(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/mastec-20260604.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 4, 2026
- Raw hash
- 6ded25f90af4bfa5b89ce2befe77a448aef13bad0fb28da8c431f3cd954e8160
Reporting entity
- Name
- MASTEC, INC.norm: mastec
Victim entity
- Name
- MASTEC, INC.norm: mastec
Incident
- Discovered
- Oct 1, 2025
- Materiality determined
- —
- Notification sent
- Jun 5, 2026
- Affected individuals
- 18
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection & Antitrust Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 35 weeks(246 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.