National Boat Owners Association (NBOA) reported a ransomware incident involving the INC Ransomware group, attributed to a compromise of a managed service provider (supply chain). The breach occurred mid-May to early June 2025 and was discovered on June 6, 2025. NBOA notified the NH Attorney General on January 23, 2026. 3,580 individuals were affected (40 NH residents), with data including names, addresses, and insurance policy numbers. No exfiltration was confirmed. NBOA terminated the MSP, engaged forensic investigators, and offered 24 months of credit monitoring via Experian.
Affected (this filing): 3,580