HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

S.W. COLE

bd_9c1688ac105988ff · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 13, 2025

Filed

Jun 26, 2025

To disclose

19 weeks

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for S.W. COLE →

S.W. Cole Engineering, Inc. notified the New Hampshire AG of a cyber incident discovered on Feb 13, 2025, involving unauthorized access to an employee email account. Data at risk included names, SSNs, and driver's license/passport numbers for 3 NH residents. Notices were sent on June 24, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 weeks / 133 days

Feb 13, 2025

Discovered

May 13, 2025

Scope determined

Jun 26, 2025

Filed

vs. sector median

+1 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7409300e328f4d922025-06-26Verified

Name: S.W. Cole Engineering, Inc.
norm: sw cole engineering

Name: S.W. COLE
norm: sw cole
Domain: swcole.com
Industry: Professional Servicesllm

Discovered: Feb 13, 2025
Materiality determined: May 13, 2025
Notification sent: Jun 24, 2025
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Took swift action to secure its email system and network
Conducted an investigation into the full nature and scope of the incident
Engaged third-party forensic specialists to investigate this matter
Sent written notice of this incident to the potentially impacted New Hampshire residents
Offered complimentary credit monitoring and identity theft protection services for twelve (12) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(133 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 26 · first

New Hampshire State AGJun 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/s-w-cole-engineering-20250626.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2025
Raw hash: a49e721f02230ee4de922e028b380328f623a9258344696e5a1b63516edd325f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityS.W. Cole Engineering, Inc.

Victim entityS.W. COLE

Incidentdiscovered Feb 13, 2025

Stated responseTook swift action to secure its email system and network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov