MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedCustomer Data InvolvedRansom DemandedIdentity (basic)Government IDMediumContained

A.L. Purinton Corporation

bd_ca722e8b1dd1681a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 17, 2026

Filed

May 22, 2026

To disclose

13 weeks

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for A.L. Purinton Corporation →

A.L. Purinton Corporation, a security service provider, experienced a ransomware attack on February 17, 2026, resulting in unauthorized access and data exfiltration. Personal information, including names, Social Security numbers, and driver's license numbers, was compromised for three New Hampshire residents. The company contained the incident, reset passwords, implemented MFA, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 94 days

Feb 17, 2026

Begins

Feb 17, 2026

Discovered

May 22, 2026

Filed

vs. sector median

6 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e923962032a63f972026-05-18 · +4dCandidate

Name: A.L. Purinton Corporation
norm: al purinton
Domain: purinton.com

Name: A.L. Purinton Corporation
norm: al purinton
Domain: purinton.com
Industry: Professional Servicesllm

Discovered: Feb 17, 2026
Breach occurred: Feb 17, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 15, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reporting to other state regulatory offices where required

During the incident: Resetting account passwords
Implementing additional measures to bolster its security posture
Working under the guidance of specialists to restore its systems safely and investigate the nature and scope of the event
Reported to federal law enforcement
Changes made: Reviewing its existing security policies and protections
Adopting additional security to safeguard against evolving threats
Implementing multi-factor authentication for all domain users
Updating user rights and access policies
Changing all passwords and password complexity requirements
Updating endpoint protection and firewall software
Offering twelve (12) months of complimentary credit monitoring and identity protection services through Cyberscout, a TransUnion company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(94 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMay 18 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/a-l-purinton-20260522.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 22, 2026
Raw hash: c07f85bb19009dff7f12f9382f26fd464a7ce034c04d59479b188b6afbae49f4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityA.L. Purinton Corporation

Victim entityA.L. Purinton Corporation

Incidentdiscovered Feb 17, 2026

Stated responseResetting account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov