HOLLAND & KNIGHT LLP

Holland & Knight, headquartered in Tampa, Florida, and established in 1968, is a law firm that offers ...

Eyemart Express, LLC notified the Iowa AG of a cybersecurity incident discovered on Feb 13, 2026, involving unauthorized access on Feb 12, 2026. The breach affected 567 Iowa residents, exposing names, SSNs, DOBs, prescriptions, and employment data. Eyemart contained the incident, engaged forensic experts, and offered 12 months of credit monitoring via IDX.

Conduent State & Local Services, LLC filed a supplemental notice with the New Hampshire Attorney General on April 27, 2026. The notice reports that Conduent notified an additional 49 New Hampshire residents on behalf of covered entities or data owners, following a prior notification on November 19, 2025.

Conduent Business Services, LLC filed a supplemental security incident notice with the New Hampshire Attorney General on March 24, 2026. The filing reports that notifications were sent to an additional 112,325 New Hampshire residents regarding a data security incident involving names and Social Security numbers. Conduent acts on behalf of covered entities/data owners and continues to provide notices.

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on February 2, 2026, regarding a security incident. The filing reports that Conduent began notifying an additional 112,952 New Hampshire residents on behalf of covered entities. The affected personal information included names and Social Security numbers. This is a follow-up to a previous supplemental notice dated January 2, 2026.

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on January 2, 2026, regarding a data security incident. The breach affected 12,666 New Hampshire residents, exposing names and Social Security numbers. Conduent, acting on behalf of covered entities/clients, is providing notifications to affected individuals. This is a follow-up to previous notifications sent in October, November, and December.

Conduent Business Services, LLC filed a supplemental security incident notice with the New Hampshire Attorney General on December 18, 2025. The filing reports that Conduent began notifying an additional 44,010 New Hampshire residents regarding a data security incident. The affected personal information includes names and Social Security numbers. Conduent acts on behalf of covered entities and continues to provide notices to affected individuals.

Conduent Business Services LLC reported a supplemental notice of a ransomware incident to the Washington AG. Unauthorized access occurred from Oct 21, 2024, to Jan 13, 2025. The breach affected 786,927 Washington residents, exposing names, SSNs, and medical/insurance data. Conduent engaged forensic experts, notified law enforcement, and restored systems.

Conduent Business Services, LLC filed a supplemental notice with the New Hampshire Attorney General on October 24, 2025, regarding an unauthorized access incident. The breach affected 10,879 NH residents, exposing names and Social Security numbers. Unauthorized access occurred between October 21, 2024, and January 13, 2025. Conduent engaged forensic experts, secured networks, and notified law enforcement.

Dulany Industries, Inc. notified the New Hampshire Attorney General of a data security incident affecting one NH resident. Unauthorized access to an employee mailbox occurred around May 27, 2025, exposing name, SSN, driver's license, and financial account data. Dulany engaged cybersecurity experts, notified law enforcement, and offered 12 months of identity theft protection.

Benworth Capital Partners issued a supplemental notice to the Washington AG regarding a ransomware incident involving a third-party service provider. The breach affected 1,851 Washington residents initially, with 81 additional residents notified in this supplemental filing (total 1,932). Data included names, SSNs, driver's licenses, and loan account details. Benworth negotiated for data return, engaged IDX for credit monitoring, and confirmed the threat was contained with no dark web dissemination observed.

Comcast Cable Communications LLC reported a cybersecurity incident involving unauthorized access to internal systems via a Citrix vulnerability between Oct 16-19, 2023. The breach impacted approx. 3.1M individuals, exposing usernames, hashed passwords, names, DOBs, and SSNs. Comcast notified law enforcement, patched the vulnerability, and offered credit monitoring.

Country Club Management of Orlando, Inc. notified the NH AG of a breach affecting ~3 NH residents. Unauthorized access detected April 6, 2022. Data included names, SSNs, driver's licenses, payment card info, and credentials. Notifications mailed Sept 29, 2022. Remediation included MFA, training, and enhanced monitoring.

MGS Mfg. Group, Inc. reported a ransomware incident occurring July 12-14, 2022, discovered on July 14, 2022. The breach affected 5,165 individuals total, including 2 Maine residents. Personal information, specifically Social Security Numbers, was compromised. The company provided 12 months of credit monitoring and identity restoration services through TransUnion to affected individuals.

BBRG Waterfront TR notified the New Hampshire Attorney General of a data security incident detected on April 6, 2022. Unauthorized access resulted in the potential exposure of personal data for approximately 2 NH residents, including names, SSNs, driver's licenses, payment card info, and passwords. The company contained the breach, engaged forensic investigators, and offered 12 months of identity protection services.

The Paradies Shops, LLC experienced a ransomware attack between October 8-13, 2020, affecting an internal administrative system. The incident impacted 10 New Hampshire residents, exposing names and government identifiers. The company engaged forensic experts, reported to federal law enforcement, and provided 12 months of credit monitoring to affected individuals. Notification was sent on July 2, 2021.

The Paradies Shops, LLC experienced a ransomware attack between Oct 8-13, 2020, affecting an internal administrative system. 657 Washington residents' names and government IDs were exposed. The company engaged forensic experts, notified law enforcement, and provided 12 months of credit monitoring.

Prominence Health Plan reported an external system breach (hacking) that occurred on November 30, 2020, and was discovered on April 22, 2021. The incident affected 45,000 individuals. Affected individuals were notified in writing on June 21, 2021, and offered 12 months of credit monitoring and identity theft assistance services through Experian.

Astoria Company LLC reported a cybersecurity incident to the New Hampshire Attorney General on April 26, 2021. An unknown actor gained unauthorized access to an Astoria system on January 5, 2021, and subsequently accessed a database containing personal information of approximately 74 individuals between January 19 and 29, 2021. Astoria discovered the intrusion on February 8, 2021. The compromised data included names, addresses, SSNs, and driver's license numbers. One New Hampshire resident was notified. Astoria reported the incident to the FBI and provided 24 months of credit monitoring via Experian.

Infinite Computer Solutions, Inc. notified the NH Attorney General of a breach affecting 17 NH residents. A test server was compromised on or around May 26, 2017, due to being inadvertently left online. Data included HR info, SSNs, driver's licenses, and financial accounts. Infinite took the server offline, engaged forensic experts, notified law enforcement, and offered 2 years of identity protection.

Big Y Foods, Inc. notified the NH AG of skimmers placed on payment terminals in 5 stores (CT/MA) between Sept 27-30, 2016. Discovered Sept 29, 2016. 1 NH resident affected. Data: credit card info, CVV, PIN. Response: law enforcement notified, forensic investigation, 2-year identity protection offered.

Information Innovators Inc. suffered a phishing attack on February 26, 2016, resulting in the unauthorized disclosure of 2015 W-2 Forms for two New Hampshire residents. The exposed data included names, addresses, Social Security Numbers, salary information, and tax withholdings. The company notified law enforcement, implemented SPF email filtering, and offered three years of identity protection services.

American Tool Supply notified the NH Attorney General on Nov 19, 2012, of a potential security incident discovered Aug 1, 2012. Hackers accessed the online ordering system in June 2012, compromising customer names and credit card numbers. 23 NH residents affected. ATS engaged IBM X-Force forensics, disabled the system, and provided 12 months of identity protection via AllClear ID.