HackingManufacturingManufacturingVulnerability ExploitData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Lohmann Corporation

bd_e521f68df3a74503 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 27, 2026

Filed

Mar 13, 2026

To disclose

6 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Lohmann Corporation →

Lohmann Corporation notified the New Hampshire Attorney General of a data security incident affecting one NH resident. The incident was identified on January 27, 2026, at a parent company facility in Germany, impacting US systems. Compromised data includes employee PII (SSN, driver's license, financial accounts). Lohmann isolated systems, engaged forensic experts, and provided 24 months of credit monitoring. The incident status is contained.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

Jan 27, 2026

Discovered

Mar 13, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_83f5abf3c70f9aeb2026-03-13Candidate

Name: FBT Gibbons
norm: fbt gibbons
Domain: fbtgibbons.com

Name: Lohmann Corporation
norm: lohmann
Industry: manufacturing
Industry: Manufacturingllm

Discovered: Jan 27, 2026
Materiality determined: —
Notification sent: Mar 13, 2026
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Activated its emergency and security protocols
Isolated and shut down potentially affected systems
Engaged internal and external forensic experts
Engaged third-party forensic investigation consultants
Changes made: Implemented several changes to protect data from any subsequent incidents
Taken additional steps to enhance the security of all its IT systems
Working to identify potential vulnerabilities in our systems and implement appropriate remedial action
Offering all employees complimentary credit monitoring and identity protection services for 24 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMar 13 · first

New Hampshire State AGMar 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lohmann-20260313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 13, 2026
Raw hash: c377cc08199d0b673ea02cfca3bddf9aebec3c0946c9bf0c7ba24d2537b45d30

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFBT Gibbons

Victim entityLohmann Corporation

Incidentdiscovered Jan 27, 2026

Stated responseActivated its emergency and security protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov