HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

SDI Management LLC

bd_a7d73a3aafda2a07 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 25, 2026

Filed

Apr 9, 2026

To disclose

6 weeks

Affected

4state residents only

Linked

5 filings

Confidence

67%

Full breach record for SDI Management LLC →

SDI Management LLC reported a network compromise to the New Hampshire Attorney General on April 9, 2026. The incident was detected on February 25, 2026, affecting 4 New Hampshire residents. Compromised data included names, dates of birth, Social Security numbers, and driver's license information. SDI engaged forensic investigators, notified law enforcement, and provided 12 months of credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 43 days

Feb 25, 2026

Discovered

Apr 9, 2026

Filed

vs. sector median

11 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_03cc0d9f796643942026-04-09Verified
Maine State AGbd_7cccb6aa80d176302026-04-09Verified
Indiana State AGbd_285f76163950ef3f2026-04-06 · +3dCandidate
Indiana State AGbd_f9048463f6e01fe62026-04-06 · +3dCandidate

Name: SDI Management LLC
norm: sdi management

Name: SDI Management LLC
norm: sdi management
Industry: Professional Servicesllm

Discovered: Feb 25, 2026
Materiality determined: —
Notification sent: Apr 9, 2026
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Engaged specialized third parties to commence an independent investigation
Reported this incident to law enforcement
Mailed notification letters to affected residents
Provided complimentary credit monitoring, identity protection services, and identity theft insurance for twelve (12) months through CyberScout
Changes made: Enhanced network security and data privacy
Continuous awareness training and assessment of data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Indiana State AGApr 6 · first

Vermont State AG+3d

Maine State AG+3d

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sdi-management-20260409.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2026
Raw hash: f984a86199b79da55062210b80ff84821300f3bf177620e8f42680dab63af91a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entitySDI Management LLC

Victim entitySDI Management LLC

Incidentdiscovered Feb 25, 2026

Stated responseEngaged specialized third parties to commence an independent investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov