HackingOtherCustomer Data InvolvedIdentity (basic)Government IDMediumContained

North Metro Harness Initiative

bd_aa2c920d13eaf04c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 14, 2025

Filed

Nov 24, 2025

To disclose

15 weeks

Affected

5state residents only

Linked

6 filings

Confidence

68%

Full breach record for North Metro Harness Initiative →

North Metro Harness Initiative, LLC dba Running Aces notified Idaho AG of a data security incident detected on August 14, 2025. An unauthorized third party compromised the network, potentially impacting PII (name, SSN, DOB, driver's license) for 5 Idaho residents. The company engaged third-party experts, notified law enforcement, and is providing credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 102 days

Aug 14, 2025

Discovered

Nov 24, 2025

Filed

vs. sector median

+6 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_d0e5768b81bad1d72025-12-19 · +25dVerified
Nebraska State AGbd_dcf1949f8b02bdf92025-12-19 · +25dVerified
Maine State AGbd_01651db588c31fd12025-12-21 · +27dVerified
Massachusetts State AGbd_32911c01c826260b2025-12-21 · +27dVerified

Show 1 more filing ↓up to 28d gap

New Hampshire State AGbd_17acf71d5a8be6782025-12-22 · +28dVerified

Name: North Metro Harness Initiative
norm: north metro harness initiative

Name: North Metro Harness Initiative
norm: north metro harness initiative
Also named: North Metro Harness Initiative, LLCdba oflegal entity
Running Acesdba oftrade name
Industry: Otherllm

Discovered: Aug 14, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified law enforcement regarding this incident
Initial access: exploit_public_facing

During the incident: Initiated its response plan
Began measures to contain and mitigate the incident
Engaged additional third-party experts
Enhanced its data security
Commenced an investigation
Worked with specialized third parties to investigate
Take appropriate remedial and hardening steps to enhance network security and data privacy
Notified law enforcement regarding this incident
Undertook a detailed and time-consuming review of those files to determine which may potentially contain PII
Engaged a specialized data review expert to review that data and identify individuals whose PII may have been accessed or acquired by the unauthorized party
Changes made: Enhanced its data security
Take appropriate remedial and hardening steps to enhance network security and data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Idaho State AGNov 24 · first · this page

Indiana State AG+25d

Nebraska State AG+25d

Maine State AG+27d

Massachusetts State AG+27d

New Hampshire State AG+28d

Pattern: first filing Nov 24 (ID), last Dec 22 (NH) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.ag.idaho.gov/content/uploads/2025/11/2025-11-14-North-Metro-Harness-Initiative-LLC-dba-Running-Aces.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2025
Raw hash: ce4e8f8c6a5a41c881407f26dc4754851858b3daa2ab424a924682c20e1fcea3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityNorth Metro Harness Initiative

Victim entityNorth Metro Harness Initiative

Incidentdiscovered Aug 14, 2025

Stated responseInitiated its response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.ag.idaho.gov