HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Bunkhouse Group

bd_a06296863afc683f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 14, 2025

To disclose

—

Affected

Not disclosed

Linked

11 filings

Confidence

65%

Full breach record for Bunkhouse Group →

Bunkhouse Management, LLC notified affected individuals of unauthorized system activity in or around June 2024 where an unauthorized person viewed and/or copied files containing personal information. The company secured systems, investigated, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jun 1, 2024

Begins

Apr 14, 2025

Filed

This filing is one of 11 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 317 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitebianlianbd_44fdb5bba0da0dcf2024-07-24 · +263dVerified by operator
Leak Sitebianlianbd_664e7e6d644f66a32024-06-01 · +317dVerified by operator

Regulatory filings (8) · sorted by filing gap

Vermont State AGbd_1e4b7f6611318a252025-04-15 · +1dVerified by operator
Maine State AGbd_22f182b9f3e36fe02025-04-15 · +1dVerified
Nebraska State AGbd_598afd6de5ac31472025-04-15 · +1dVerified
Indiana State AGbd_8b42b07d86b03dbe2025-04-15 · +1dVerified by operator

Show 4 more filings ↓up to 894d gap

Massachusetts State AGbd_68fda91813abcac12024-08-28 · +229dVerified by operator
Massachusetts State AGbd_1584051f2b37fec42022-11-02 · +894dVerified by operator
Montana State AGbd_5cc0560d666860cc2022-11-02 · +894dVerified by operator
Indiana State AGbd_e709cdac72e551d02022-11-02 · +894dCandidate

Name: Bunkhouse Group
norm: bunkhouse group
Domain: bunkhousehotels.com

Name: Bunkhouse Group
norm: bunkhouse group
Domain: bunkhousehotels.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jun 1, 2024 – Jun 30, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Promptly took steps to secure our systems
Conducted a diligent investigation
Offering you access to credit monitoring and identity theft protection at no cost
Changes made: Continue to take steps to review and enhance our safeguards in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Massachusetts State AGNov 2 · first

Montana State AGNov 2 · first

Indiana State AGNov 2 · first

Massachusetts State AG+665d

New Hampshire State AG+894d · this page

Vermont State AG+895d

Maine State AG+895d

Nebraska State AG+895d

Indiana State AG+895d

Pattern: first filing Nov 2 (MA), last Apr 15 (IN) — a 895-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bunkhouse-management-20250415.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2025
Raw hash: d9a9cb4d15efeb5a5b2d0ac1369682b20bd699a09ef26206d645750670cdc867

Linked disclosures

Ransomware claims (2)

Regulatory filings (8) · sorted by filing gap

Reporting entityBunkhouse Group

Victim entityBunkhouse Group

IncidentUnauthorized Access

Stated responsePromptly took steps to secure our systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov