HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Gale Associates, Inc.

bd_d2f187b64f0cd844 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2025

Filed

Sep 12, 2025

To disclose

14 weeks

Affected

62state residents only

Linked

4 filings

Confidence

70%

Full breach record for Gale Associates, Inc. →

Gale Associates, Inc. notified the New Hampshire Attorney General of a data event affecting 62 NH residents. Unauthorized access occurred between June 4-6, 2025, potentially exposing names, SSNs, driver's licenses, and financial data. Gale secured systems, notified federal law enforcement, and provided 12 months of TransUnion credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 14 weeks / 98 days

Jun 4, 2025

Begins

Jun 6, 2025

Discovered

Sep 12, 2025

Filed

vs. sector median

+6 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_19173f0972c04e4c2025-09-12Candidate
Massachusetts State AGbd_68713b35b2c56cf12025-09-12Verified
Vermont State AGbd_8fc4854ef0a6b3ed2025-09-12Verified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Gale Associates, Inc.
norm: gale associates
Industry: Financial Servicesllm

Discovered: Jun 6, 2025
Breach occurred: Jun 4, 2025 – Jun 6, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 12, 2025
Affected individuals: 62state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified federal law enforcement regarding the event
Initial access: exploit_public_facing

During the incident: Moved quickly to secure the systems and launched an investigation
Undertook a thorough review of the impacted systems
Notified federal law enforcement regarding the event
Provided written notice of this incident to sixty-two (62) New Hampshire residents
Providing access to credit monitoring services for twelve (12) months, through TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Reviewing our protocols, policies, and procedures to reduce the likelihood of a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGSep 12 · first

Massachusetts State AGSep 12 · first

Vermont State AGSep 12 · first

New Hampshire State AGSep 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gale-associates-20250912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2025
Raw hash: 0cc5a5ce9c5bc141fdcd3122888b4b0d5e4c254d087064ece37291a673ee1d3e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityGale Associates, Inc.

Incidentdiscovered Jun 6, 2025

Stated responseMoved quickly to secure the systems and launched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov