HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
2nd Swing
bd_b84ea95ba0de01cf · schema v1 · pii pii-v1
Full breach record for 2nd Swing →2nd Swing, a retail corporation, notified the New Hampshire Attorney General of a cybersecurity incident involving its website. Unauthorized access to customer information occurred between March 30 and March 31, 2026. Approximately six New Hampshire residents were affected, with their names and financial/credit card data potentially exposed. 2nd Swing engaged forensic specialists, sent notices to affected individuals on May 5, 2026, and offered 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_45d639decaa875cbMaine State AGfiled 2026-05-07Verified
- bd_720e40cc0a6b7555Indiana State AGfiled 2026-05-07Candidate
- bd_77585d12151af21aMassachusetts State AGfiled 2026-05-01(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/2nd-swing-20260507.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 7, 2026
- Raw hash
- 07a676b6aec062ad89501d79e56dde0ba433ea01cb50a920c7cdd3a21d14f017
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- 2nd Swingnorm: 2nd swing
- Domain
- 2ndswing.com
- Industry
- retail_consumer
Incident
- Discovered
- Mar 31, 2026
- Materiality determined
- —
- Notification sent
- May 5, 2026
- Affected individuals
- 6
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.