HackingRetail & ConsumerRetailCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Master Mobilelink LLC and Mobily LLC

bd_be61a3772fb49c8d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 9, 2025

Filed

Mar 27, 2026

To disclose

20 weeks

Affected

3state residents only

Linked

7 filings

Confidence

67%

Full breach record for Master Mobilelink LLC and Mobily LLC →

Mobilelink (Master Mobilelink LLC/Mobily LLC) notified NH AG of a data security incident discovered Nov 9, 2025, affecting ~3 NH residents. Unauthorized network access exposed names and SSNs. Mobilelink notified law enforcement, implemented technical safeguards, and offered 12 months of IDX credit monitoring. Notifications sent March 27, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 138 days

Nov 9, 2025

Discovered

Mar 27, 2026

Filed

vs. sector median

+12 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Nebraska State AGbd_e26fa92a7a0661242026-03-27Verified
Indiana State AGbd_fbc07aaf87bd327f2026-03-27Candidate
Vermont State AGbd_fe91d2ad897d3de32026-03-27Verified
Massachusetts State AGbd_2fd5300b582e06572026-03-28 · +1dVerified

Show 2 more filings ↓up to 26d gap

Texas State AGbd_46a8d14a29488f3a2026-03-30 · +3dVerified
Illinois State AGbd_ceb00f724c3078cf2026-03-01 · +26dVerified

Name: Dykema
norm: dykema
Domain: dykema.com

Name: Master Mobilelink LLC and Mobily LLC
norm: master mobilelink llc and mobily
Also named: Master Mobilelink LLC and Mobily LLCdba oflegal entity
Mobilelinkdba oftrade name
Industry: Retail & Consumerllm

Discovered: Nov 9, 2025
Materiality determined: —
Notification sent: Mar 27, 2026
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Provided notice to New Hampshire Office of the Attorney General Consumer Protection & Antitrust Bureau

During the incident: Notified local and federal law enforcement regarding the Incident
Deployed and implemented additional technical safeguards in its environment
Providing access to credit monitoring services, through IDX, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Changes made: Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing individuals with information on how to obtain a free credit report
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(138 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGMar 1 · first

Nebraska State AG+26d

Indiana State AG+26d

Vermont State AG+26d

New Hampshire State AG+26d · this page

Massachusetts State AG+27d

Texas State AG+29d

Pattern: first filing Mar 1 (IL), last Mar 30 (TX) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/master-mobilelink-mobily-20260327.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2026
Raw hash: 5fd0aeb9e35bdcc977cebd8eff11c96b5746b13f29da5fa44a543f55d9e7c9eb

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityDykema

Victim entityMaster Mobilelink LLC and Mobily LLC

Incidentdiscovered Nov 9, 2025

Stated responseNotified local and federal law enforcement regarding the Incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov