HackingAgriculture & FoodAgricultureStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Belkorp

bd_9dd6cf9730644863 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 26, 2025

Filed

Sep 29, 2025

To disclose

22 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Belkorp →

Belkorp Ag LLC notified the New Hampshire Attorney General of a data breach affecting one NH resident. Unauthorized access occurred between April 18-26, 2025, resulting in the exfiltration of names and Social Security numbers. Belkorp engaged forensic specialists, notified law enforcement and regulators, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

discovery → filing · 22 weeks / 156 days

Apr 18, 2025

Begins

Apr 26, 2025

Discovered

Sep 29, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_2c7cc4cf8f3b29c92025-09-29Verified
California State AGbd_33f21d0ec4ef5dc02025-09-29Verified
HHS OCRbd_dfdd474db57fec7c2025-09-29Verified
Montana State AGbd_553661b59516e0d72025-09-25 · +4dVerified

Name: Fisher & Phillips LLP
norm: fisher & phillips

Name: Belkorp
norm: belkorp
Domain: belkorp.com
Industry: Agriculture & Foodllm

Discovered: Apr 26, 2025
Breach occurred: Apr 18, 2025 – Apr 26, 2025
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified relevant state and federal regulatorsNotified federal law enforcement
Initial access: valid_credentials

During the incident: Launched an investigation into the nature and scope of the Event with the assistance of third-party forensic specialists
Engaged third-party data review specialists to undertake a comprehensive programmatic and manual review
Conducted a time-intensive manual review of its records to confirm the identities of and contact information for individuals affected
Engaged a third party to assist with address enrichment efforts
Provided preliminary notice of this Event and offered IDShield’s credit monitoring and identity theft protection services to its current employees
Continued providing written notice of this Event to affected individuals
Notified federal law enforcement
Notified relevant state and federal regulators
Changes made: Enhancing administrative and technical safeguards
Will continue providing employee training
Offering credit monitoring and identity restoration services through IDX for 12 months at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(156 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Montana State AGSep 25 · first

Massachusetts State AG+4d

California State AG+4d

HHS OCR+4d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/belkorp-ag-20250929.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 29, 2025
Raw hash: 3ba022b37a550934c7d82ad3dee73719080d9f5d81533902da11e925ca7147ef

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFisher & Phillips LLP

Victim entityBelkorp

Incidentdiscovered Apr 26, 2025

Stated responseLaunched an investigation into the nature and scope of the Event with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov