HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Gale Associates, Inc.
bd_d2f187b64f0cd844 · schema v1 · pii pii-v1
Full breach record for Gale Associates, Inc. →Gale Associates, Inc. notified the New Hampshire Attorney General on September 12, 2025, of a data event affecting 62 state residents. Unauthorized access occurred between June 4 and June 6, 2025, by an unknown actor. Potentially affected data includes names, SSNs, driver's license numbers, passport numbers, payment card info, and financial account data. Gale secured systems, notified federal law enforcement, and provided 12 months of TransUnion credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_19173f0972c04e4cMaine State AGfiled 2025-09-12Candidate
- bd_8fc4854ef0a6b3edVermont State AGfiled 2025-09-12Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gale-associates-20250912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2025
- Raw hash
- 26856c79c814f4efd4f54da9c0a3a5874ac45c670edea32c711809ddf201842b
Reporting entity
- Name
- Gale Associates, Inc.norm: gale associates
Victim entity
- Name
- Gale Associates, Inc.norm: gale associates
Incident
- Discovered
- Jun 6, 2025
- Materiality determined
- —
- Notification sent
- Sep 12, 2025
- Affected individuals
- 62
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement regarding the eventproviding written notice of this incident to additional relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.