Social EngineeringFinancial ServicesFinanceVishingStolen CredentialsCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Deer Management Co. LLC

bd_ac854ec3bf278adc · schema v1 · pii pii-v2

Severity

Medium

Discovered

Aug 3, 2026

Filed

Sep 30, 2026

To disclose

8 weeks

Affected

4state residents only

Linked

2 filings

Confidence

69%

Full breach record for Deer Management Co. LLC →

Deer Management Co. LLC (dba Bessemer Venture Partners) experienced a voice phishing (vishing) incident on August 3, 2026, resulting in temporary unauthorized access to employee accounts. The incident affected 4 New Hampshire residents, exposing social security numbers and other personal information. The incident was contained by August 4, 2026. The company engaged forensic investigators, notified law enforcement, and is offering two years of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Aug 3, 2026

Begins

Aug 3, 2026

Discovered

Sep 30, 2026

Filed

vs. sector median

on median

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_d82cea78889a26762026-09-30Candidate

Name: Deer Management Co. LLC
norm: deer management

Name: Deer Management Co. LLC
norm: deer management
Industry: Financial Servicesllm

Discovered: Aug 3, 2026
Breach occurred: Aug 3, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 30, 2026
Affected individuals: 4state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566 Phishing
Threat actor: External
Regulator citations: Notified NH Department of Justice
Initial access: phishing_link

During the incident: Took immediate action to contain and remediate the incident
Engaged a leading cyber forensic firm to assist with its investigation and response
Notified law enforcement
Changes made: Reviewing and enhancing as appropriate security policies, tools, and awareness training
Offering two years of credit monitoring and identity protection services for affected individuals, free of charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGSep 30 · first

New Hampshire State AGSep 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/deer-management-co-20260930.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2026
Raw hash: 254a222e53f1bf6e7a70a0459341b5bba6ae7bd2c3637d92b09e2f32da52f3ba

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityDeer Management Co. LLC

Victim entityDeer Management Co. LLC

Incidentdiscovered Aug 3, 2026

Stated responseTook immediate action to contain and remediate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov