HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

PHILADELPHIA INDEMNITY INSURANCE COMPANY

bd_f683aa41fa9b8693 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 9, 2025

Filed

Jul 22, 2025

To disclose

6 weeks

Affected

42state residents only

Linked

6 filings

Confidence

66%

Full breach record for PHILADELPHIA INDEMNITY INSURANCE COMPANY →

Philadelphia Indemnity Insurance Company notified the NH Attorney General of unauthorized access to its network between June 9-10, 2025. An unauthorized party copied files containing names, dates of birth, and driver's license numbers of 42 New Hampshire residents. The company engaged third-party experts, disconnected systems, and reported to the FBI. No ransomware was involved. Credit monitoring is being offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 43 days

Jun 9, 2025

Begins

Jun 9, 2025

Discovered

Jul 22, 2025

Filed

vs. sector median

2 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_065dc76da0b1a94c2025-07-22Verified
California State AGbd_066275914355d5e22025-07-22Verified
Indiana State AGbd_0b209e31a5b1fab62025-07-22Verified
Massachusetts State AGbd_f4639ba8de3d04a82025-07-22Verified

Show 1 more filing ↓up to 2d gap

Texas State AGbd_2f156f8bbe4900f02025-07-24 · +2dCandidate

Name: PHILADELPHIA INDEMNITY INSURANCE COMPANY
norm: philadelphia indemnity insurance

Name: PHILADELPHIA INDEMNITY INSURANCE COMPANY
norm: philadelphia indemnity insurance
Industry: Financial Servicesllm

Discovered: Jun 9, 2025
Breach occurred: Jun 9, 2025 – Jun 10, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 22, 2025
Affected individuals: 42state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Office of the Attorney General of New HampshireReported the event to the FBI

During the incident: Enacted response protocols
Engaged third-party experts to assist
Proactively disconnected some systems as a precaution
Reported the event to the FBI
Conducted a comprehensive analysis of the files that were involved
Began mailing notification letters to the New Hampshire residents
Providing access to credit monitoring services for twelve months at no cost
Established a dedicated, toll-free call center for individuals to call with questions
Changes made: Implemented additional safeguards to further protect its systems
Enhanced existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(43 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGJul 22 · first

California State AGJul 22 · first

Indiana State AGJul 22 · first

Massachusetts State AGJul 22 · first

New Hampshire State AGJul 22 · first · this page

Texas State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/philadelphia-indemnity-insurance-20250722.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2025
Raw hash: 9b697027d71e40411f2da03ed603b3986637903a4ab3317ee269ec9c67dc694a

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPHILADELPHIA INDEMNITY INSURANCE COMPANY

Victim entityPHILADELPHIA INDEMNITY INSURANCE COMPANY

Incidentdiscovered Jun 9, 2025

Stated responseEnacted response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov