Clustered 3 filings across 3 jurisdictions · filing window Aug 15, 2025 → Aug 21, 2025. View entity profile → Other incidents for this victim →
incident inc_187a8b0fb8af41af · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
IN ME NH
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
all State AG
per-filing reported counts
State AGs report only their own residents; bars show per-filing counts.
Earliest sighting first · deep chronology in Litigation Timeline
Feb 24, 2025
When the intrusion reportedly occurred, per the linked filings
Feb 28, 2025
Reported by NEW HAMPSHIRE AG filing
Aug 4, 2025
Reported by MAINE AG filing
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
The Business Council of New York State Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-02-24 and was reported on 2025-08-15. 121 Indiana residents were affected. 47,329 individuals affected in total.
Affected (this filing): 47,329
The Business Council of New York State, Inc. reported a data breach affecting 47,329 individuals, including 29 Maine residents. The breach, described as an external system hack, occurred on February 24, 2025, and was discovered on August 4, 2025. Affected individuals were notified on August 15, 2025. Based on the filename of the notification document, the compromised information included names and Social Security Numbers. The company is offering 12 months of credit monitoring services through IDX.
Affected (this filing): 29
The Business Council of New York State, Inc. (BCNYS) notified the New Hampshire Attorney General on August 21, 2025, of a cybersecurity incident occurring February 24-25, 2025. BCNYS discovered unauthorized access to internal systems on February 28, 2025. The incident affected 65 New Hampshire residents, exposing names, dates of birth, Social Security numbers, and medical/clinical information. BCNYS engaged third-party forensic experts, contained the incident, and is offering complimentary credit monitoring to affected individuals. No identity fraud has been reported to date.
Affected (this filing): 65