DisclosureLens
HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Boston Capital Holdings LP

bd_cdd5e07e39628f06 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2026

Filed

May 18, 2026

To disclose

14 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

65%
Full breach record for Boston Capital Holdings LP2 incidents on file

Boston Capital Holdings LP notified the California AG of unauthorized access to its systems between Jan 16-22, 2026. The actor used legitimate cloud systems to circumvent security controls and accessed/copied files. Discovery occurred on Feb 12, 2026. Affected data includes names and potentially SSNs. The company engaged cybersecurity specialists, contained the incident, and is offering identity monitoring.

Incident timeline

undetected · 27 days
discovery → filing · 14 weeks / 95 days

Jan 16, 2026

Begins

Feb 12, 2026

Discovered

May 18, 2026

Filed

vs. sector median

+4 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filingsup to 17d gap

Filing propagation · 11 filings · 11 states

View merged incident ↗

Pattern: first filing May 1 (IL), last May 19 (TX) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.