HackingHospitalityHospitalityCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

The Reserve Vineyards and Golf Club

bd_eb018e73ad7db741 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 3, 2026

Filed

Jun 23, 2026

To disclose

12 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for The Reserve Vineyards and Golf Club →

The Reserve Vineyards & Golf Club notified the NH AG of a data security incident discovered on April 3, 2026. Suspicious network activity led to the potential download of employee personal information, including names, SSNs, and driver's license data. One NH resident was notified on June 17, 2026, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 81 days

Apr 3, 2026

Discovered

Jun 23, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_33d2e2fda50687562026-06-17 · +6dVerified
Oregon State AGbd_db0da8c66b3097e52026-07-02 · +9dVerified

Name: The Reserve Vineyards and Golf Club
norm: the reserve vineyards and golf club
Domain: reservegolf.com

Name: The Reserve Vineyards and Golf Club
norm: the reserve vineyards and golf club
Domain: reservegolf.com
Industry: Hospitalityllm

Discovered: Apr 3, 2026
Materiality determined: —
Notification sent: Jun 17, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Provided notice to New Hampshire Attorney General pursuant to N.H. Rev. Stat. § 359-C:20
Initial access: valid_credentials

During the incident: Initiated an investigation with the assistance of external experts
Took steps to secure its systems
Launched a comprehensive investigation
Established a toll-free call center through Cyberscout
Offering New Hampshire residents whose Social Security numbers may have been involved twelve (12) months of complimentary credit and identity protection services through Cyberscout
Changes made: Reviewing existing policies and procedures
Implementing enhanced security measures to reduce the likelihood of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJun 17 · first

New Hampshire State AG+6d · this page

Oregon State AG+15d

Pattern: first filing Jun 17 (IN), last Jul 2 (OR) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/reserve-vineyards-golf-club-20260623.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 23, 2026
Raw hash: d73253328275601a7c4723103d201350bbd25b8b2f33855fb22bdccc5231ab92

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe Reserve Vineyards and Golf Club

Victim entityThe Reserve Vineyards and Golf Club

Incidentdiscovered Apr 3, 2026

Stated responseInitiated an investigation with the assistance of external experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov