HackingStolen CredentialsData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Lasership Inc.
bd_c2e7f806757d5c22 · schema v1 · pii pii-v1
Full breach record for Lasership Inc. →Lasership, Inc. (dba OnTrac Final Mile) notified the New Hampshire Attorney General of a data security incident affecting 3 New Hampshire residents. Unauthorized access to OnTrac's network occurred between April 13 and 15, 2025. The incident involved the potential access of names and Social Security numbers. OnTrac engaged forensic specialists, notified law enforcement, and implemented additional security measures. Affected individuals were notified on August 27, 2025, and offered 12 months of credit monitoring.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_65a5c2fec808682eTexas State AGfiled 2025-08-28Verified
- bd_1c6bf32c12e74e41Oregon State AGfiled 2025-08-27(1d gap)Candidate
- bd_6f553fa5e208ba5fVermont State AGfiled 2025-08-27(1d gap)Verified
- bd_947d4739d89551f8Montana State AGfiled 2025-08-27(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 1d gap
- bd_ac2690bb7a3014c8California State AGfiled 2025-08-27(1d gap)Verified
- bd_d194585170f4d9daWashington State AGfiled 2025-08-27(1d gap)Verified
- bd_f292f3ec407d03ddIndiana State AGfiled 2025-08-27(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/lasership-ontrac-final-mile-20250828.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 28, 2025
- Raw hash
- 20115a0b1890eabd93d077c2675d3b4079a74bd690e6ffd940f51983d2e07265
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- Lasership Inc.norm: lasership
Incident
- Discovered
- Apr 15, 2025
- Materiality determined
- —
- Notification sent
- Aug 27, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(135 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.