HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Automated Building Systems

bd_df50bbeff200c4d9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 3, 2025

Filed

Jun 30, 2025

To disclose

21 weeks

Affected · nationwide

29310 in this filing

Linked

2 filings

Confidence

67%

Full breach record for Automated Building Systems →

Automated Building Systems, Inc. notified the NH AG of a cybersecurity event discovered on Feb 3, 2025. An unknown actor accessed systems and potentially copied data including names, SSNs, driver's licenses, and financial account numbers. 293 individuals were affected (10 NH residents). ABS engaged forensic specialists, contained the threat, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 147 days

Feb 3, 2025

Discovered

Jun 30, 2025

Filed

vs. sector median

+2 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_aa342358c9d186bc2025-07-01 · +1dVerified

Name: Automated Building Systems
norm: automated building
Domain: abscompanies.com

Name: Automated Building Systems
norm: automated building
Domain: abscompanies.com
Industry: Technologyllm

Discovered: Feb 3, 2025
Materiality determined: —
Notification sent: Jun 30, 2025
Affected individuals: 293state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Moved quickly to respond to and investigate the Event
Took steps to secure its network, successfully containing and eliminating the threat
Monitored and confirmed that there was no further suspicious activity
Engaged counsel and third-party cybersecurity specialists to conduct a forensic investigation
Extensively reviewed the in-scope data to identify the types of information present and any individuals to whom the information related
Offered twenty-four (24) months of complimentary credit monitoring and identity theft restoration services provided by Kroll Information Assurance, LLC
Changes made: Taking steps to strengthen the security of its systems and ensure the protection of any sensitive data ABS possesses
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(147 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 30 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/automated-building-systems-20250630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2025
Raw hash: dfd683cec668c80ea3f7a2bcb052a10faa2e892491961c8955e85f31ad243b49

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAutomated Building Systems

Victim entityAutomated Building Systems

Incidentdiscovered Feb 3, 2025

Stated responseMoved quickly to respond to and investigate the Event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov