Confirmed breach. Intrusion Jun 14, 2025–Jun 16, 2025, discovered Jun 17, 2025 — the first regulatory filing landed 335 days later. 892 individuals reported across the linked filings.
Discovery variance · Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster; needs two dated filings.
State AGConfirmedLifecycle stage 2 of 3: ConfirmedUnverified claimConfirmedEnforced
Affected (total reported)
892
Data types
—
Jurisdictions
3
IN NH VT
Linked filings
3
all State AG
Timeline
Earliest sighting first · deep chronology in Litigation Timeline
Breach window
Jun 14, 2025 → Jun 16, 2025
When the intrusion reportedly occurred, per the linked filings
Breach discovered
Jun 17, 2025
Reported by NEW HAMPSHIRE AG filing
335 days
3 State AG filingsMay 18, 2026ExpandCollapse
NHINVT
⛰️New Hampshire State AGlinked via multistate filing link · 100%
Bomco, Inc. notified the New Hampshire Attorney General of a data event affecting 23 NH residents. Unauthorized access occurred June 14-16, 2025; discovered June 17, 2025. Impacted data included names, SSNs, driver's licenses, and financial account info. No fraudulent misuse reported. Remediation included credit monitoring via IDX and enhanced security protocols.
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Bomco Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-06-14 and was reported on 2026-05-18. 1 Indiana residents were affected. 892 individuals affected in total.
Affected (this filing): 892
🍁Vermont State AGlinked via multistate filing link · 100%
Bomco, Inc. reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-18. The reporting organization type is Other Commercial. 6 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers, Financial Account Codes, Credit and Debit Account Info, Health Records.