HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive

The Bowers Group, Inc.

bd_e0fda7fa1858fefc · schema v1 · pii pii-v1

Full breach record for The Bowers Group, Inc. →

The Bowers Group, Inc. notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access occurred between Nov 14-16, 2024, via compromised user accounts. Data exposed included PII (names, addresses, emails) and government IDs (SSN, driver's license, passport). The company engaged forensic investigators, reset credentials, blocked IPs, and provided 2 years of Kroll identity monitoring. Notification was sent Aug 20, 2025.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_7ff5ef2ca0b73a76Indiana State AGfiled 2025-08-20(8d gap)Candidate
bd_aff6d211105202d8Indiana State AGfiled 2025-08-20(8d gap)Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bowers-group-20250828.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 28, 2025
Raw hash: 379e9fd95d091abf49420e32e6f0d7f23ea73a87f9c0a13efc7ea3a46117f13d

Reporting entity

Name: The Bowers Group, Inc.
norm: the bowers

Victim entity

Name: The Bowers Group, Inc.
norm: the bowers

Incident

Discovered: Nov 16, 2024
Materiality determined: —
Notification sent: Aug 20, 2025
Affected individuals: 1
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement of the event
Initial access: valid_credentials

Compliance

Time to disclose: 41 weeks(285 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.