HackingData MishandlingCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Opus Card Systems
bd_f0b66fd630408564 · schema v1 · pii pii-v1
Full breach record for Opus Card Systems →Opus Card Systems, Inc. notified the New Hampshire Attorney General of a data security incident involving a third-party processor. On July 21, 2025, Opus was alerted to potential compromise of personal data. A forensic investigation confirmed unauthorized access to files containing New Hampshire residents' full names, Social Security numbers, and driver's license or passport information. Two residents were notified on November 3, 2025, and offered 12 months of credit monitoring. No fraud has been reported.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4de2858479935dc4Vermont State AGfiled 2025-11-07Verified
- bd_a2232d88f0d8e368Maine State AGfiled 2025-11-07Candidate
- bd_66089410d10edd4cIndiana State AGfiled 2025-11-03(4d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/opus-card-systems-20251107.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 7, 2025
- Raw hash
- e2b23ad5c6c34ba4562cd9ae4d469e54c4e87abad1543cd2f127094b585792c6
Reporting entity
- Name
- Pierson Ferdinand LLPnorm: pierson ferdinand
- Domain
- pierferd.com
Victim entity
- Name
- Opus Card Systemsnorm: opus card
Incident
- Discovered
- Jul 21, 2025
- Materiality determined
- —
- Notification sent
- Nov 3, 2025
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Regulator citations
- Notified New Hampshire Office of the Attorney General
- Initial access
- supply_chain
Compliance
- Time to disclose
- 16 weeks(109 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.