BOMCO, INC.
ent_019e5f4abaa26fcdcde252b68a869b44
Disclosures
5
State AG · 5 jurisdictions
Incidents
2
filings grouped by incident
Max affected reported
892
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- BOMCO, INC.
- Normalized
- bomco— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 254900GBQZ8HBSZ8WS53
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- bomco.com
Disclosure history (5)newest first
- 🦞Maine State AGas victim2026-05-19
Bomco, Inc. reported an external system breach (hacking) occurring on June 14, 2025, discovered on April 20, 2026. The incident affected 4 Maine residents. The company sent written notifications to affected individuals on May 18, 2026. No identity theft protection services were offered.
- ⛰️New Hampshire State AGas victim2026-05-18
Bomco, Inc. notified the New Hampshire Attorney General of a data event affecting 23 NH residents. Unauthorized access occurred June 14-16, 2025; discovered June 17, 2025. Impacted data included names, SSNs, driver's licenses, and financial account info. No fraudulent misuse reported. Remediation included credit monitoring via IDX and enhanced security protocols.
- 🏎️Indiana State AGas victim2026-05-18
Bomco Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-06-14 and was reported on 2026-05-18. 1 Indiana residents were affected. 892 individuals affected in total.
- 🍁Vermont State AGas victim2026-05-18
Bomco, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-18. The reporting organization type is Other Commercial. 6 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Info, Health Records.
- 🏛️Massachusetts State AGas victim2026-05-01
Bomco, Inc. issued a consumer notification letter dated May 18, 2026, regarding an incident involving personal information. The company conducted an investigation, secured its network, and enhanced security protocols. Affected individuals were offered 24 months of complimentary credit monitoring and identity restoration services through IDX. The notice provides instructions for enrollment, fraud alerts, and credit freezes, consistent with Massachusetts data breach notification requirements.