Onward Consulting Corp.
bd_eb4f431ff37bd94a · schema v1 · pii pii-v2
Full breach record for Onward Consulting Corp. →Onward Consulting Corp. discovered on August 7, 2026, that an unauthorized third party gained access to its website (onwardresearch.com), created an administrator account, and installed hidden malicious software. The incident potentially exposed names, addresses, email addresses, credit card numbers (including CVV), and login passwords of customers. Two New Hampshire residents were affected. The company removed the malware, deactivated compromised passwords, and engaged outside experts. The investigation remains ongoing.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 7, 2026
Discovered
Aug 31, 2026
Filed
vs. sector median
16 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- Indiana State AGbd_8027bbe343185f7e2026-09-01 · +1dVerified
- Massachusetts State AGbd_9c6d61de3029bedf2026-08-01 · +30dCandidate
Filing propagation · 3 filings · 3 states
View merged incident ↗Pattern: first filing Aug 1 (MA), last Sep 1 (IN) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.