HackingRetail & ConsumerRetailCustomer Data InvolvedPIIFinancial accountLowContained

Miz Mooz, Inc.

bd_ed2019ef24688903 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 28, 2026

Filed

Feb 26, 2026

To disclose

29 days

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Miz Mooz, Inc. →

Miz Mooz, Inc. notified the New Hampshire Attorney General of a data event involving unusual activity in its website environment. The incident occurred between January 25 and January 28, 2026, and was discovered on January 28, 2026. One New Hampshire resident was affected, with name and credit card information potentially compromised. Miz Mooz engaged legal counsel, offered 12 months of credit monitoring via TransUnion, and mailed notification letters on February 26, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 29 days

Jan 25, 2026

Begins

Jan 28, 2026

Discovered

Feb 26, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_4f66579600f78a212026-02-26Candidate
Maine State AGbd_5110f1aa030a931e2026-02-26Verified
Vermont State AGbd_8ddde4ac40ebe3702026-02-26Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Miz Mooz, Inc.
norm: miz mooz
Industry: Retail & Consumerllm

Discovered: Jan 28, 2026
Breach occurred: Jan 25, 2026 – Jan 28, 2026
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 26, 2026
Affected individuals: 1state-resident count only
Data types: PIIFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: exploit_public_facing

During the incident: Moved quickly to investigate and respond to the Event
Informed its law firm and began identifying the affected individuals in preparation for notice
Offered at least 12 months of complimentary credit monitoring and identity theft restoration services through TransUnion
Provided guidance on how to better protect against identity theft and fraud
Provided information on how to place a fraud alert and security freeze on one’s credit file
Provided contact details for the national consumer reporting agencies
Provided information on how to obtain a free credit report
Provided a reminder to remain vigilant for incidents of fraud and identity theft by reviewing account statements and monitoring free credit reports
Provided the contact details for the Federal Trade Commission
Changes made: Offered at least 12 months of complimentary credit monitoring and identity theft restoration services through TransUnion
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGFeb 26 · first

Maine State AGFeb 26 · first

Vermont State AGFeb 26 · first

New Hampshire State AGFeb 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/miz-mooz-20260226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2026
Raw hash: 592d46ac773fce2f4b0ebd0503a26df7ea0e3ac62a7cd45a2a56c3c32b65ade1

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityMiz Mooz, Inc.

Incidentdiscovered Jan 28, 2026

Stated responseMoved quickly to investigate and respond to the Event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov