HackingStolen CredentialsDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Impac Mortgage Holdings, Inc.
bd_d1441c9d42c18c92 · schema v1 · pii pii-v1
Full breach record for Impac Mortgage Holdings, Inc. →Impac Mortgage Holdings, Inc. notified the New Hampshire Attorney General of a data event affecting 18 NH residents. Unauthorized access occurred between Feb 21 and Mar 20, 2024. The incident involved exposure of names and Social Security numbers. Impac reported the incident to federal law enforcement, implemented additional safeguards, and offered 12 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_12967a53eefe1d12Vermont State AGfiled 2026-04-17Verified
- bd_450c61a65f466a37California State AGfiled 2026-04-17Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/impac-mortgage-holdings-20260417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2026
- Raw hash
- 259a847032c7f7964d8643d8e5e39d1dc29232e70cf7f4dee45ea64189a7156d
Reporting entity
- Name
- Mullen Coughlin LLCnorm: mullen coughlin
Victim entity
- Name
- Impac Mortgage Holdings, Inc.norm: impac mortgage
- Domain
- impaccompanies.com
Incident
- Discovered
- Mar 20, 2024
- Materiality determined
- —
- Notification sent
- Mar 27, 2026
- Affected individuals
- 18
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 months(758 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.