Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
James H Cunningham Insurance Agency Inc.
bd_d0cbcaba870d45dc · schema v1 · pii pii-v1
Full breach record for James H Cunningham Insurance Agency Inc. →James H Cunningham Insurance Agency Inc. reported a cybersecurity incident to the New Hampshire Attorney General on August 25, 2025. The breach involved unauthorized access to the network between September 6 and 13, 2024, discovered on September 10, 2024, via a phishing email. The incident affected 16 New Hampshire residents, exposing names, DOBs, SSNs, financial account numbers, and health information. The agency engaged forensic investigators and law enforcement, and offered 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_08156557a17c41c8California State AGfiled 2025-08-25Verified
- bd_a768613b7b405302Montana State AGfiled 2025-08-25Candidate
- bd_cd7ff165e01cbd50Texas State AGfiled 2025-08-26(1d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/james-h-cunningham-insurance-agency-20250825.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2025
- Raw hash
- 9f2b8061fe644e64e9a8d96db1cd92f14e8b1f36a6287171579b98b42383abb5
Reporting entity
- Name
- Alexander D. Boydnorm: alexander d boyd
Victim entity
- Name
- James H Cunningham Insurance Agency Inc.norm: james h cunningham insurance agency
Incident
- Discovered
- Sep 10, 2024
- Materiality determined
- —
- Notification sent
- Aug 25, 2025
- Affected individuals
- 16
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 50 weeks(349 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.