HackingVulnerability ExploitZero-DayData ExfiltratedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
lnforma
bd_d6dad90e7572ae7e · schema v1 · pii pii-v1
Full breach record for lnforma →lnforma notified the New Hampshire Attorney General of a cybersecurity incident involving its Oracle E-Business Suite. An unauthorized party exploited a previously unknown zero-day vulnerability in Oracle software between August 11 and 18, 2025, to access and copy employment records. The breach affected 9 New Hampshire residents, exposing names, Social Security numbers, dates of birth, and bank account information. lnforma isolated the system, engaged forensic experts, notified law enforcement, and is providing 24 months of credit monitoring to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/informa-20260105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 5, 2026
- Raw hash
- 6479f6feefb3f3585ec1466408d5b4c750bc557f1bff3d2af03df546509e112b
Reporting entity
- Name
- Norton Rose Fulbright US LLPnorm: norton rose fulbright us
Victim entity
- Name
- lnforma
Incident
- Discovered
- Nov 1, 2025
- Materiality determined
- —
- Notification sent
- Jan 2, 2026
- Affected individuals
- 9
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Consumer Protection Bureau, Office of the Attorney General, New Hampshire
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.