HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
VDyne
bd_c82faa31fd276bc2 · schema v1 · pii pii-v1
Full breach record for VDyne →VDyne, Inc. notified the New Hampshire Attorney General of a security incident affecting one NH resident. On September 22, 2025, VDyne was alerted via a dark web scan that its name appeared on a threat actor's site. An investigation confirmed on September 26 that unauthorized access likely occurred, potentially exposing names, addresses, SSNs, DOBs, and banking info. VDyne engaged forensic experts and counsel, notified law enforcement, rotated passwords, and implemented MFA. Notices were sent on October 26, 2025, offering 12 months of Experian credit monitoring.
Leak gap clock⏱ Leak >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
A leak claim by qilin about this victim predates this filing by 59 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/vdyne-20251103.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 3, 2025
- Raw hash
- ecc444183ec2cb90aa18dfe44830699d52f30cc7efa9a6e0104222edaacec6c5
Reporting entity
- Name
- VDynenorm: vdyne
- Domain
- vdyne.com
Victim entity
- Name
- VDynenorm: vdyne
- Domain
- vdyne.com
Incident
- Discovered
- Sep 26, 2025
- Materiality determined
- —
- Notification sent
- Oct 26, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General's Consumer Protection & Antitrust Bureau
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.