HackingHospitalityHospitalityData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Ocean Edge Resort & Golf Club

bd_c46e925f14ccca65 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jul 31, 2025

Filed

Aug 25, 2026

To disclose

13 months

Affected

10state residents only

Linked

2 filings

Confidence

69%

Full breach record for Ocean Edge Resort & Golf Club →2 incidents on file

Ocean Edge Resort and Golf Club notified the NH Attorney General that an unauthorized actor accessed its network between July 22 and July 31, 2025, copying files containing names, SSNs, driver's license numbers, and financial account information for 10 New Hampshire residents. The incident was discovered on July 31, 2025. The company notified federal law enforcement, contained the breach, and is offering 12 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

Incident timeline

undetected · 9 days

discovery → filing · 13 months / 390 days

Jul 22, 2025

Begins

Jul 31, 2025

Discovered

Aug 25, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

A leak claim by nitrogen about this victim predates this filing by 369 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Vermont State AGbd_74792dba252c691a2026-08-25Candidate

Name: Ocean Edge Resort and Golf Club
norm: ocean edge resort and golf club

Name: Ocean Edge Resort & Golf Club
norm: ocean edge resort golf club
Domain: oceanedge.com
Industry: Hospitalityllm

Discovered: Jul 31, 2025
Breach occurred: Jul 22, 2025 – Jul 31, 2025
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 25, 2026
Affected individuals: 10state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Office of the New Hampshire Attorney General

During the incident: Launched an investigation to determine the nature and scope of the activity
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for twelve (12) months, through TransUnion, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Working to implement additional safeguards and training to its employees
Working to review our existing policies and procedures to implement additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(390 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Vermont State AGAug 25 · first

New Hampshire State AGAug 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ocean-edge-resort-golf-club-20260825.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 25, 2026
Raw hash: 513187cdf8c208fcbf053f2941be0755b67c852557bae9bd97cb24b29538afc5

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityOcean Edge Resort and Golf Club

Victim entityOcean Edge Resort & Golf Club

Incidentdiscovered Jul 31, 2025

Stated responseLaunched an investigation to determine the nature and scope of the activity

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov