InvoiceCloud, Inc. notified the New Hampshire AG of a security event on July 16, 2025. On June 16, 2025, unauthorized code was placed on systems supporting customer payment websites. Approximately 20 NH residents had name, billing address, email, payment card number, expiration date, and CVV scraped. InvoiceCloud engaged forensic investigators, notified law enforcement, removed the script, and offered 1 year of credit monitoring via TransUnion.
Affected (this filing): 20