HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Northern Technologies International Corporation

bd_b2428d3035fc44c1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 17, 2026

Filed

Jun 26, 2026

To disclose

18 weeks

Affected

1state residents only

Confidence

65%

Full breach record for Northern Technologies International Corporation →2 incidents on file

Northern Technologies International Corporation (NTIC) notified Massachusetts residents of a data security event involving unauthorized network activity occurring between February 13 and 18, 2026. NTIC discovered the incident on February 17, 2026, and engaged external cybersecurity professionals for forensic investigation. Personal information, specifically names, was potentially accessed. NTIC is offering complimentary credit monitoring and identity theft protection services through Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d18 weeks discovery → filing

Incident timeline

undetected · 4 days

discovery → filing · 18 weeks / 129 days

Feb 13, 2026

Begins

Feb 17, 2026

Discovered

Jun 26, 2026

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Northern Technologies International Corporation
norm: northern technologies

Name: Northern Technologies International Corporation
norm: northern technologies
Industry: Technologyllm

Discovered: Feb 17, 2026
Breach occurred: Feb 13, 2026 – Feb 18, 2026
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 5, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
Offering complimentary credit monitoring identity theft protection services through Experian IdentityWorks
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(129 days from discovery to filing)
Compliance flags: MA AG >90dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1042-northern-technologies-international-corporation/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2026
Raw hash: 17b1d7839faeaa6574f1c173bf856e7be1e656a3be1d27ea0f480b901f2ab7e4

Reporting entityNorthern Technologies International Corporation

Victim entityNorthern Technologies International Corporation

Incidentdiscovered Feb 17, 2026

Stated responseCommenced a prompt and thorough investigation

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov