DisclosureLens
HackingPIIIdentity (basic)Financial accountCredentialsLowActive

Onward Consulting Corp.

bd_eb4f431ff37bd94a · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 7, 2026

Filed

Aug 31, 2026

To disclose

24 days

Affected

2state residents only

Linked

2 filings

Confidence

68%
Full breach record for Onward Consulting Corp.

Onward Consulting Corp. notified the New Hampshire Attorney General on August 31, 2026, of a cyber-attack discovered on August 7, 2026. An unauthorized party gained access to Onward's website, installed malicious software, and accessed customer data including names, addresses, email addresses, credit card numbers (with CVV), and login credentials. Two New Hampshire residents were affected. Onward engaged outside experts, removed the malware, deactivated compromised passwords, and is enhancing security measures. Investigation remains ongoing.

Incident timeline

discovery → filing · 24 days

Aug 7, 2026

Discovered

Aug 31, 2026

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
New Hampshire State AG+30d · this page

Pattern: first filing Aug 1 (MA), last Aug 31 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.