HackingOtherData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

SSA Holdings, LLC

bd_c34bbad8fe4d69b2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 13, 2025

To disclose

—

Affected

2state residents only

Linked

7 filings

Confidence

66%

Full breach record for SSA Holdings, LLC →2 incidents on file

SSA Holdings, LLC notified the NH Attorney General of a cybersecurity incident affecting 2 New Hampshire residents. An unauthorized person accessed SSA's systems and acquired copies of files on September 15, 2025. On October 24, 2025, SSA determined the files contained names and Social Security numbers. SSA contained the incident, reported to law enforcement, and is offering credit monitoring via Kroll. Notifications were mailed on November 13, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 15, 2025

Begins

Nov 13, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Nebraska State AGbd_1dd069a5a2bc97412025-11-13Verified
Indiana State AGbd_6fc5dec703fe85f12025-11-13Verified
Massachusetts State AGbd_9ace5e7496f9a3f22025-11-13Verified
California State AGbd_ab4cf346f9f94b092025-11-13Verified

Show 2 more filings ↓up to 12d gap

Texas State AGbd_0efcbd22983e9c592025-11-14 · +1dCandidate
Illinois State AGbd_54fa92149d4d3aed2025-11-01 · +12dVerified

Name: SSA Holdings, LLC
norm: ssa holdings

Name: SSA Holdings, LLC
norm: ssa holdings
Industry: Otherllm

Discovered: —
Breach occurred: Sep 15, 2025
Materiality determined: —
Notification sent: Nov 13, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Took action to contain the incident
Began an investigation
Reported the incident to law enforcement
Established a dedicated, toll-free call center for individuals to call with questions
Offering credit monitoring through Kroll to the New Hampshire residents
Changes made: Taken, and will continue to take, steps to enhance the security of its computer network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGNov 1 · first

Nebraska State AG+12d

Indiana State AG+12d

Massachusetts State AG+12d

California State AG+12d

New Hampshire State AG+12d · this page

Texas State AG+13d

Pattern: first filing Nov 1 (IL), last Nov 14 (TX) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ssa-holdings-20251113.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: 7bc3fb788d3658ce832d5952c4cbdcf31393f627bb55b82911dbf4a4a1f4a7c1

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySSA Holdings, LLC

Victim entitySSA Holdings, LLC

IncidentUnauthorized Access

Stated responseTook action to contain the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov