HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
iBUYPOWER
bd_c47613a84681af76 · schema v1 · pii pii-v1
Full breach record for iBUYPOWER →iBUYPOWER (American Future Technology Corp) notified the NH Attorney General on June 5, 2026, of a data security incident detected June 21, 2025. An unauthorized third party accessed IT network data, potentially impacting one NH resident's personal information, including SSN, DOB, and health insurance info. iBUYPOWER engaged cybersecurity specialists, hardened its network, and provided 12 months of Experian identity monitoring.
Leak gap clock✗ Leak >180d50 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by lynx about this victim predates this filing by 350 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6c448c2b3e8d13e3Leak Sitelynxfiled 2025-06-20(350d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_33089f431df75368California State AGfiled 2026-06-12(7d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/american-future-technology-ibuypower-20260605.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 5, 2026
- Raw hash
- f999706e0433d271258db9f9ccea3999258f2dd2ac90a717b01b3877669a8dcd
Reporting entity
- Name
- Michael Best & Friedrich LLPnorm: michael best friedrich
Victim entity
- Name
- iBUYPOWERnorm: ibuypower
- Domain
- ibuypower.com
Incident
- Discovered
- Jun 21, 2025
- Materiality determined
- Jun 5, 2026
- Notification sent
- Jun 5, 2026
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 50 weeks(349 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.