HackingStolen CredentialsData ExfiltratedIDENTITY_BASICLowContained
EAC Consulting
bd_9ceeacd645f4c99e · schema v1 · pii pii-v1
Full breach record for EAC Consulting →EAC Consulting, Inc. notified Massachusetts residents of a data security incident discovered on February 1, 2025. An unauthorized actor accessed and acquired personal information, including names combined with other data elements. The company engaged cybersecurity specialists, secured its network, and is offering complimentary credit monitoring and fraud assistance services.
Massachusetts clock✗ MA AG >90d15 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 455 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_8e878ca88fd0e4a7Leak Siteplayfiled 2025-01-31(455d gap)Candidate
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-757-eac-consulting-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- 9cac6d66029f2f80c69874cd2f732d0cad8f84f666899d3309a6370b7a89eeb6
Reporting entity
- Name
- EAC Consultingnorm: eac consulting
- Domain
- eacconsult.com
Victim entity
- Name
- EAC Consultingnorm: eac consulting
- Domain
- eacconsult.com
Incident
- Discovered
- Feb 1, 2025
- Materiality determined
- —
- Notification sent
- May 11, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(454 days from discovery to filing)
- Compliance flags
- MA AG >90dLeak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.