Lumitex, Inc.

Lumitex, Inc. notified the New Hampshire Attorney General of a data event discovered on July 30, 2025. The incident potentially exposed names, addresses, Social Security numbers, and state-issued IDs of 2 New Hampshire residents. Lumitex engaged forensic investigators, cooperated with federal law enforcement, and offered 24 months of credit monitoring. Notification letters were mailed on August 15, 2025.

Lumitex, Inc. disclosed a cybersecurity incident discovered on June 6, 2025, involving unauthorized access to its network. The attacker exploited a public-facing application and used stolen credentials to exfiltrate data. Affected individuals' names, addresses, SSNs, driver's license numbers, and financial account information were compromised. Lumitex notified affected individuals in Vermont, New York, Massachusetts, Connecticut, New Hampshire, Maine, and Rhode Island. The company engaged Mandiant for forensic investigation and offered 24 months of credit monitoring and identity theft protection.

Lumitex, Inc. reported an external system breach that occurred on July 30, 2025, and was discovered on August 7, 2025. One Maine resident was affected. The company provided notification to the affected individual on August 15, 2025, and offered 24 months of credit monitoring services.

Lumitex Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-07-30 and was reported on 2025-08-15. 1 Indiana residents were affected. 379 individuals affected in total.