Confirmed breach. Intrusion Jan 14, 2026–Jan 18, 2026, discovered Jan 18, 2026 — the first regulatory filing landed 51 days later. 10 individuals reported across the linked filings.
Bay Colony Associates, Inc. notified the NH AG of unauthorized network access between Jan 14-18, 2026, discovered Jan 18. Approximately 8 NH residents affected; data included names and SSNs. Notices mailed March 9, 2026. Remediation included password changes and policy reviews; credit monitoring offered.
Bay Colony Associates, Inc. (Boston, MA) suffered unauthorized network access between Jan 14–18, 2026, discovered Jan 18. Review completed Feb 18, 2026 found names and SSNs exposed. 2,290 total individuals affected; 2 Maine residents. Notifications sent Mar 9, 2026. 12-month Experian IdentityWorks monitoring offered.
Affected (this filing): 2
ME AG >30d · 51d
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.