HackingProfessional ServicesFinancial accountIdentity (basic)Government IDMediumContained

A.L. Purinton Corporation

bd_e923962032a63f97 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 18, 2026

To disclose

—

Affected

67state residents only

Linked

2 filings

Confidence

67%

Full breach record for A.L. Purinton Corporation →

A.L. Purinton Corporation notified Massachusetts residents of a data privacy event involving names, Social Security numbers, and driver's license/state ID numbers. The company reported the incident to federal law enforcement, reset passwords, and offered 24 months of credit monitoring via CyberScout. No evidence of fraud was found.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

May 18, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_ca722e8b1dd1681a2026-05-22 · +4dVerified

Name: A.L. Purinton Corporation
norm: al purinton
Domain: purinton.com

Name: A.L. Purinton Corporation
norm: al purinton
Domain: purinton.com

Discovered: —
Materiality determined: —
Notification sent: May 15, 2026
Affected individuals: 67state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported the event to federal law enforcement
Initial access: valid_credentials

During the incident: Resetting account passwords
Implementing additional measures to bolster our security posture
Reported the event to federal law enforcement
Offering you with complimentary credit monitoring and identity protection services through CyberScout
Changes made: Resetting account passwords
Implementing additional measures to bolster our security posture
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMay 18 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-797-al-purinton-corporation/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 18, 2026
Raw hash: 99cb4afca26e57e8d983e139ebfdf9a935f321aba1c4b62b96eb6860036ad1c2

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityA.L. Purinton Corporation

Victim entityA.L. Purinton Corporation

IncidentUnauthorized Access

Stated responseResetting account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov