HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDMediumContained

First Atlantic Capital, Ltd.

bd_f338d391f5f36b82 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 18, 2025

Filed

Feb 2, 2026

To disclose

20 weeks

Affected

3state residents only

Linked

5 filings

Confidence

67%

Full breach record for First Atlantic Capital, Ltd. →2 incidents on file

New Hampshire Attorney General notice dated February 2, 2026, from First Atlantic Capital, Ltd. regarding a data event discovered on September 18, 2025. Unauthorized access to the network resulted in the exposure of names, Social Security numbers, and/or tax ID numbers for 3 New Hampshire residents. Notifications were sent on January 30, 2026, offering credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 137 days

Sep 18, 2025

Discovered

Feb 2, 2026

Filed

vs. sector median

+11 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_49bac84c4f681fa72026-01-30 · +3dCandidate
Indiana State AGbd_678a16b9c812aa482026-01-30 · +3dVerified
Nebraska State AGbd_aa28d57e1c60b9872026-01-30 · +3dVerified
Vermont State AGbd_f0afccb96e750cbc2026-01-30 · +3dVerified

Name: First Atlantic Capital, Ltd.
norm: first atlantic

Name: First Atlantic Capital, Ltd.
norm: first atlantic
Industry: Financial Servicesllm

Discovered: Sep 18, 2025
Materiality determined: —
Notification sent: Jan 30, 2026
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Submitted notice to New Hampshire Attorney General John Formella
Initial access: exploit_public_facing

During the incident: Took immediate steps to secure the network
Initiated an investigation with the assistance of independent cybersecurity experts
Conducted a thorough review of the affected information
Established a toll-free call center to answer questions about the incident
Offered the New Hampshire residents the opportunity to enroll in complimentary identity protection services
Offered twelve (12) months of complimentary credit monitoring and identity protection services
Offered $1 million identity theft insurance
Offered proactive fraud assistance through Cyberscout, a TransUnion company
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Continues to review policies and procedures to implement additional measures as appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(137 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGJan 30 · first

Indiana State AGJan 30 · first

Nebraska State AGJan 30 · first

Vermont State AGJan 30 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/first-atlantic-capital-20260202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2026
Raw hash: 6a4eb1f1626e32af79d16cf7f14f5f2afb396d65953eca4cf18b23c1a5e9c34d

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityFirst Atlantic Capital, Ltd.

Victim entityFirst Atlantic Capital, Ltd.

Incidentdiscovered Sep 18, 2025

Stated responseTook immediate steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov