HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMediumActive

Jacobs Doland Beer

bd_e911998e4b463321 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 31, 2026

Filed

May 5, 2026

To disclose

5 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Jacobs Doland Beer →

Jacobs Doland Beer, LLC notified the NH Attorney General of a network intrusion discovered on March 31, 2026. An investigation confirmed that personal information, including names and Social Security numbers, of one New Hampshire resident may have been accessed by an unauthorized third party. The company secured its systems, engaged forensic investigators, and offered credit monitoring. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 35 days

Mar 31, 2026

Discovered

May 5, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 3 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 35 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Siteakirabd_ddcc1717ad9b63932026-05-07 · +2dCandidate
Leak Siteakirabd_15acd30ca008215c2026-03-31 · +35dVerified by operator

Name: Jacobs
norm: jacobs
Domain: jacobs.com

Name: Jacobs Doland Beer
norm: jacobs doland beer
Domain: jdb.nyc
Industry: Retail & Consumerllm

Discovered: Mar 31, 2026
Materiality determined: —
Notification sent: May 4, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the Office of the Attorney General, Consumer Protection Bureau

During the incident: Secured its systems
Engaged a third-party forensic firm to investigate the matter
Notified relevant individuals with an offering of complimentary access to credit monitoring services and a dedicated call center
Notified requisite regulatory authorities
Changes made: Reviewed and enhanced its data security policies and procedures related to data security and cybersecurity
Implemented additional technical safeguards to further enhance the security of information in its possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jacobs-doland-beer-20260505.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 5, 2026
Raw hash: 296fefb0b4fbaeb3a228562d181413e9290b3f6e3dcb8d90ac583276148ac647

Linked disclosures

Ransomware claims (2)

Reporting entityJacobs

Victim entityJacobs Doland Beer

Incidentdiscovered Mar 31, 2026

Stated responseSecured its systems

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov