HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Quatrro Business Support Services, Inc.
bd_d21df72633c66463 · schema v1 · pii pii-v1
Full breach record for Quatrro Business Support Services, Inc. →Quatrro Business Support Services, Inc. notified the New Hampshire Attorney General of a security incident involving five NH residents. Unauthorized access occurred Nov 11-19, 2025. Quatrro discovered the incident on Dec 7, 2025, and confirmed on Feb 25, 2026, that personal information (names, SSNs, driver's licenses, passport numbers, payment card/financial account numbers, health insurance policy numbers) was accessed. Notifications were mailed on March 23, 2026, offering one year of credit monitoring via Kroll.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0ecd190cfdd6f1ecMaine State AGfiled 2026-03-23Candidate
- bd_28cd7981525dd4ecIndiana State AGfiled 2026-03-23Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/quatrro-business-support-services-20260323.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 23, 2026
- Raw hash
- 57af2f771fdd1f162f1c96873c0e69bbbaa63d4ba6d3ec039005edd3da193d89
Reporting entity
- Name
- Quatrro Business Support Services, Inc.norm: quatrro business support
Victim entity
- Name
- Quatrro Business Support Services, Inc.norm: quatrro business support
Incident
- Discovered
- Dec 7, 2025
- Materiality determined
- —
- Notification sent
- Mar 23, 2026
- Affected individuals
- 5
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.