HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
360training.com, Inc.
bd_ab7cdff01ec73a5a · schema v1 · pii pii-v1
Full breach record for 360training.com, Inc. →360training.com, Inc. notified the New Hampshire Attorney General of a data incident involving its brand Mortgage Educators and Compliance (MEC). On November 25, 2025, suspicious activity was discovered where an unauthorized party injected a script into the MEC website to exfiltrate credit card data to a Google Analytics account. The incident affected 145 New Hampshire residents, exposing names and credit card information. 360training secured the site, notified Google, and sent written notices with 12 months of credit monitoring to affected individuals on February 24, 2026.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_e51321dcb57bf6ccVermont State AGfiled 2026-02-24Verified
- bd_f60f284eb2e8f2d0Indiana State AGfiled 2026-02-24Candidate
- bd_1d3c3c77b73c45e0Texas State AGfiled 2026-02-25(1d gap)Verified
- bd_69b5217b14eaa514Maine State AGfiled 2026-02-25(1d gap)Verified
Source provenance
- Source URL
- https://www.doj.nh.gov/sites/g/files/ehbemt721/files/remote-docs/360training.com-20260224.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2026
- Raw hash
- 73791b70142a428b7a072688c138e4b9c62758464c45ab3b6850a64903b43262
Reporting entity
- Name
- 360training.com, Inc.norm: 360trainingcom
- Domain
- 360training.com
Victim entity
- Name
- 360training.com, Inc.norm: 360trainingcom
- Domain
- 360training.com
Incident
- Discovered
- Nov 25, 2025
- Materiality determined
- —
- Notification sent
- Feb 24, 2026
- Affected individuals
- 145
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Data Incident Notification to New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.