Social EngineeringInformationIdentity (basic)Government IDFinancial accountFinancialPHIHealth (basic)MediumContained

SYNOPSYS, INC.

bd_efebcba0ef813c45 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 3, 2025

Filed

Apr 1, 2026

To disclose

17 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for SYNOPSYS, INC. →2 incidents on file

Synopsys, Inc. notified the New Hampshire Attorney General on April 1, 2026, regarding a cybersecurity incident affecting a small number of New Hampshire residents. Unauthorized access to email accounts occurred between June 17, 2025, and December 4, 2025. The incident was discovered on December 3, 2025, and has been contained. Affected data may include names, SSNs, driver's licenses, DOB, addresses, bank account numbers, and health insurance information. Synopsys offered 24 months of Equifax Credit Watch Gold to affected residents.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d17 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 169 days

discovery → filing · 17 weeks / 119 days

Jun 17, 2025

Begins

Dec 3, 2025

Discovered

Apr 1, 2026

Filed

This filing is one of 4 about the same incident.View merged incident

A leak claim by arkana about this victim predates this filing by 301 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sited1rbd_e2325a05a2cd68ba2026-07-13 · +103dVerified by operator
Leak Sitearkanabd_70c9fe3f5148ee832025-06-04 · +301dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_cde12bcbf924f0552026-04-02 · +1dVerified

Name: SYNOPSYS, INC.
norm: synopsys
Domain: synopsys.com

Name: SYNOPSYS, INC.
norm: synopsys
Domain: synopsys.com

Discovered: Dec 3, 2025
Breach occurred: Jun 17, 2025 – Dec 4, 2025
Undetected for: 169 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 1, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancialPHIHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Consumer Protection & Antitrust Bureau
Initial access: phishing_link

During the incident: Launched an investigation, supported by leading cybersecurity experts
Offering the New Hampshire resident that is being notified a complimentary 24-month membership of Equifax Credit WatchTM Gold
Changes made: Taking steps designed to enhance the security of our systems and to help prevent recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(119 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 1 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/synopsys-20260401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2026
Raw hash: 6d2eb23b73860eeab3c61f78f05b32ae1848db3a2f6e05e79df9ca141ef6fcc8

Linked disclosures

Ransomware claims (2)

Regulatory filings (1) · sorted by filing gap

Reporting entitySYNOPSYS, INC.

Victim entitySYNOPSYS, INC.

Incidentdiscovered Dec 3, 2025

Stated responseLaunched an investigation, supported by leading cybersecurity experts

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov