HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

PDCM Insurance

bd_b9fae3c2546841f4 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 28, 2025

Filed

Sep 29, 2026

To disclose

17 months

Affected

9state residents only

Linked

7 filings

Confidence

70%

Full breach record for PDCM Insurance →2 incidents on file

PDCM Insurance experienced unauthorized access to certain files and folders on its network between April 27 and April 28, 2025. The company became aware of suspicious activity on April 28, 2025. The incident potentially affected the name and Social Security number of nine New Hampshire residents. PDCM notified the NH Attorney General and affected individuals on September 29, 2026, and is providing 12 months of credit monitoring through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 17 months / 519 days

Apr 27, 2025

Begins

Apr 28, 2025

Discovered

Sep 29, 2026

Filed

vs. sector median

+66 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Texas State AGbd_33db7ab9c14628eb2026-09-29Verified
Iowa State AGbd_58b97268f1cd75902026-09-29Verified
Vermont State AGbd_f1c20e7c7f37a49c2026-09-29Verified
Massachusetts State AGbd_45b5b038d37be1402026-09-01 · +28dVerified

Show 2 more filings ↓up to 57d gap

Indiana State AGbd_a9d8baf22c0228232026-08-03 · +57dVerified
Iowa State AGbd_c616afb8877dcc902026-08-03 · +57dCandidate

Name: PDCM Insurance
norm: pdcm insurance

Name: PDCM Insurance
norm: pdcm insurance
Industry: Financial Servicesllm

Discovered: Apr 28, 2025
Breach occurred: Apr 27, 2025 – Apr 28, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2026
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney GeneralProviding written notice of this incident to relevant state and federal regulators

During the incident: Took steps to secure its network
Notified law enforcement
Began an investigation to determine the nature and scope of the activity
Began an extensive review of the contents of the systems involved
Providing data owner clients with the results of the review
Providing access to complimentary credit monitoring services for twelve (12) months, through Kroll
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state and federal regulators
Providing written notice to the three major credit reporting agencies
Changes made: Implementing additional safeguards and training to its employees
Implemented additional security measures
Reviewed relevant policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 months(519 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Indiana State AGAug 3 · first

Iowa State AGAug 3 · first

Massachusetts State AG+29d

Texas State AG+57d

Iowa State AG+57d

Vermont State AG+57d

New Hampshire State AG+57d · this page

Pattern: first filing Aug 3 (IN), last Sep 29 (NH) — a 57-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pdcm-insurance-20260929.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 29, 2026
Raw hash: 7a17894feccde6a6b8ed3f1c975ee8764c3c630feb0f0f2fab29478dc24a21f2

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityPDCM Insurance

Victim entityPDCM Insurance

Incidentdiscovered Apr 28, 2025

Stated responseTook steps to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov