Indastrial Acceptance Corporation
bd_aa16cbe2fb05315d · schema v1 · pii pii-v1
Full breach record for Indastrial Acceptance Corporation →Industrial Acceptance Corporation (IAC), an auto financing company, reported a ransomware incident to the New Hampshire Attorney General on May 28, 2026. IAC became aware of unauthorized network activity on February 24, 2025. The attack involved a ransomware group claiming responsibility, which encrypted files and exfiltrated data. The breach affected 966 New Hampshire residents, exposing names, Social Security numbers, and driver's license numbers. IAC took systems offline, engaged forensic investigators and law enforcement, and is offering 12 months of credit monitoring to affected individuals.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_ab7b0ef963d42cb7Indiana State AGfiled 2026-05-28Verified
- bd_db8fcb8b8729724bMaine State AGfiled 2026-05-29(1d gap)Candidate
- bd_95d220c931e3ba95Vermont State AGfiled 2026-06-01(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/industrial-acceptance-corporation-20260528.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2026
- Raw hash
- 2dd7f180426dac038d58bbdbd62b8714f3dce7009f731ea1dd0ee5a8e068f241
Reporting entity
- Name
- Kennedys CMK LLPnorm: kennedys cmk
Victim entity
- Name
- Indastrial Acceptance Corporationnorm: indastrial acceptance
- Domain
- iaccredit.com
- Industry
- financial_services
Incident
- Discovered
- Feb 24, 2025
- Materiality determined
- —
- Notification sent
- May 28, 2026
- Affected individuals
- 966
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
Compliance
- Time to disclose
- 15 months(458 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.