HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
BELK HOLDINGS, LLC
bd_d9f3d3fc3a3ab7b9 · schema v1 · pii pii-v1
Full breach record for BELK HOLDINGS, LLC →Belk, Inc. reported a cyber incident where an unauthorized third party accessed corporate systems between May 7-11, 2025, discovered on May 8, 2025. One New Hampshire resident's name and SSN were compromised. Belk engaged cybersecurity experts, cooperated with law enforcement, reset passwords, and rebuilt systems. Notification sent June 5, 2025, with 12 months credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/belk-20250605.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 5, 2025
- Raw hash
- 73f6166e204c16ba96ec0fa101d5f559c22f2d27b02986fab5210156d9942443
Reporting entity
- Name
- BELK HOLDINGS, LLCnorm: belk holdings
- Domain
- belk.com
Victim entity
- Name
- BELK HOLDINGS, LLCnorm: belk holdings
- Domain
- belk.com
Incident
- Discovered
- May 8, 2025
- Materiality determined
- —
- Notification sent
- Jun 5, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.