Thompson Hine LLP

Motility Software Solutions, a provider of dealer management software, detected unusual activity on August 19, 2025. An investigation revealed an unauthorized actor deployed malware that encrypted systems and may have exfiltrated limited files containing personal data. Approximately 17,068 New Hampshire residents were potentially affected. Data exposed may include names, addresses, emails, phone numbers, dates of birth, SSNs, and driver's license numbers. The company engaged forensic investigators, restored systems from backups, and is offering credit monitoring.

Motility Software Solutions notified the Iowa AG of a data incident detected on August 19, 2025. An unauthorized actor deployed malware encrypting systems and potentially exfiltrated dealer customer PII (names, SSNs, driver's licenses). Approximately 4,145 Iowa residents were affected. Notifications began September 29, 2025, including credit monitoring services.

Cherokee County School District (SC) notified the SC Attorney General on Sept 3, 2025, of a March 2025 incident where a third party gained unauthorized access to IT systems. Data accessed included names, SSNs, driver's licenses, passports, financial account info, and health data for 46,119 SC residents. CCSD engaged forensic responders, notified the FBI, and offered credit monitoring.

Crown Equipment Corporation notified the NH AG of a cyberattack discovered June 8, 2024, affecting 25 NH residents. Unauthorized third-party access impacted employee census and injury data. Crown engaged forensic investigators, notified law enforcement, and provided credit monitoring.

Thompson Hine LLP reported a data breach to the Indiana Attorney General. The breach occurred on 2023-03-10 and was reported on 2023-05-10. 2 Indiana residents were affected. 15 individuals affected in total.

Multi-Color Corporation notified the New Hampshire Attorney General of a cybersecurity incident discovered on September 29, 2022, affecting at least 21 NH residents. Unauthorized third-party access compromised employee personnel files, including SSNs, driver's licenses, DOBs, and financial/health data. MCC engaged the FBI and forensic experts, contained the threat, and provided 2 years of credit monitoring.

Dayton Superior Corporation (DSC), a manufacturing firm, notified the NH Attorney General of a ransomware incident discovered on July 24, 2022. The attack encrypted databases and files, leading to the compromise of HR data for 2 NH residents (employees/beneficiaries). Data included names, SSNs, driver's licenses, and health/financial data. DSC isolated systems, engaged forensic experts, notified the FBI and DHS, and offered 2 years of credit monitoring.

DecisionDesk, Inc. notified the NH AG of a breach involving its hosting provider, MongoHQ. Unauthorized access occurred on or about Oct 28, 2013. MongoHQ discovered the intrusion on Nov 1, 2013. DecisionDesk reset passwords and notified 28 NH residents on Dec 6, 2013. Data included PII and SSNs for 9 residents; credit monitoring offered.