BUNN COMMERCIAL LP

BUNN Commercial, LP issued a Massachusetts Attorney General breach notification on July 20, 2026, regarding a cybersecurity event involving customer personal information. The company states it is unaware of actual misuse but is offering 24 months of credit monitoring. Specific details of the attack vector are restricted by Massachusetts law. The notification includes instructions for credit freezes and fraud alerts.

BUNN Commercial, LP notified the NH Attorney General of a cyber incident where an unauthorized actor accessed its network between November 6 and November 29, 2025. The actor viewed and/or took files containing personal information of three New Hampshire residents, including names, Social Security numbers, driver's license numbers, financial account information, and medical/health insurance information. BUNN engaged forensic specialists, notified law enforcement, and is offering 24 months of credit monitoring. The investigation concluded on June 23, 2026, and notices were sent on July 20, 2026.

BUNN Commercial, LP reported a cyber incident in Nebraska affecting 17 residents. Unauthorized access occurred between Nov 6-29, 2025. Data included names, SSNs, driver's licenses, financial account info, and medical/health insurance data. BUNN notified law enforcement, engaged forensic specialists, and provided 24 months of credit monitoring via TransUnion. Notices were sent to Nebraska residents on July 20, 2026.

BUNN COMMERCIAL, LP filed a data-breach notice with the Illinois Attorney General in July 2026 (case 26-07-1324). The register records the breach as discovered on June 23, 2026. Personal information types reported: drivers license, medical information, passport number, ssn, username password. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.