HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)LowContained

Bristol Bay Government Services Group LLC

bd_dea98b4d6bef1f68 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 19, 2024

Filed

May 27, 2025

To disclose

31 weeks

Affected

1state residents only

Linked

6 filings

Confidence

66%

Full breach record for Bristol Bay Government Services Group LLC →

Bristol Bay Government Services Group, LLC notified the NH Attorney General of a security incident discovered on October 19, 2024, affecting 1 NH resident. Notifications began May 23, 2025. Data involved likely contact details. External specialists engaged.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 31 weeks / 220 days

Oct 19, 2024

Begins

Oct 19, 2024

Discovered

May 27, 2025

Filed

vs. sector median

+14 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_40caa5212a0c65cb2025-05-23 · +4dVerified
Indiana State AGbd_94bb14473d1912382025-05-23 · +4dCandidate
Nebraska State AGbd_abf602ef37e271302025-05-23 · +4dVerified
Indiana State AGbd_204075e3a4faa30e2025-06-06 · +10dCandidate

Show 1 more filing ↓up to 10d gap

Massachusetts State AGbd_a133c2c3d356b2612025-06-06 · +10dVerified

Name: Troutman Pepper Locke, LLP
norm: troutman pepper locke

Name: Bristol Bay Government Services Group LLC
norm: bristol bay government
Industry: Professional Servicesllm

Discovered: Oct 19, 2024
Breach occurred: Oct 19, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 23, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Engaged external cybersecurity specialists to assist with the investigation
Conducted a review of the data involved to determine whose information may be involved and to what extent
Began sending letters to individuals whose contact information is known to BBGSG
Established a dedicated website for individuals to learn more about this incident and access resources to help protect their information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(220 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

Massachusetts State AGMay 23 · first

Indiana State AGMay 23 · first

Nebraska State AGMay 23 · first

New Hampshire State AG+4d · this page

Indiana State AG+14d

Massachusetts State AG+14d

Pattern: first filing May 23 (MA), last Jun 6 (MA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bristol-bay-government-group-20250527.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 27, 2025
Raw hash: 6c6f057ac20f2199244b97500987aa061ef8cbf8a8ce30489577eaaa9cf617af

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityTroutman Pepper Locke, LLP

Victim entityBristol Bay Government Services Group LLC

Incidentdiscovered Oct 19, 2024

Stated responseEngaged external cybersecurity specialists to assist with the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov