Cove USA
bd_f8b2a16b164920de · schema v1 · pii pii-v1
Full breach record for Cove USA →Cove Risk Services, LLC filed a supplemental data breach notification with the New Hampshire Attorney General regarding unauthorized access occurring on or around May 3, 2025. The incident affected 1,568 New Hampshire residents, exposing names, dates of birth, SSNs, and medical/health insurance information. The breach was discovered on May 5, 2025, following a network disruption. Cove Risk Services engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring. Notification to affected individuals occurred in waves, with the latest wave on January 9, 2026.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_6f775e212b7c0fe3New Hampshire State AGfiled 2025-12-22(39d gap)Verified
- bd_8c4f3c3ea44b8387Indiana State AGfiled 2025-12-12(49d gap)Candidate
- bd_ca1c8f7dccf3fd10Vermont State AGfiled 2025-12-12(49d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cove-risk-services-20260130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 30, 2026
- Raw hash
- 9b5fe8d56be201706a7fb25cc1d8a44c30eef5e5b462a66d5787c0ef682b3d3e
Reporting entity
- Name
- Cove USAnorm: cove usa
- Domain
- shopcoveusa.com
Victim entity
- Name
- Cove USAnorm: cove usa
- Domain
- shopcoveusa.com
Incident
- Discovered
- May 5, 2025
- Materiality determined
- —
- Notification sent
- Jan 9, 2026
- Affected individuals
- 1,568
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Previously reported to New Hampshire Attorney General's office on December 12, 2025
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 39 weeks(270 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.