HackingOtherCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDMediumContained

Solairus Aviation, LLC

bd_0013707c6b69ead3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 31, 2024

Filed

Oct 28, 2024

To disclose

8 weeks

Affected

77state residents only

Linked

7 filings

Confidence

66%

Full breach record for Solairus Aviation, LLC →2 incidents on file

Solairus Aviation, LLC notified the NH Attorney General of a data security incident affecting 77 New Hampshire residents. Suspicious activity was detected on August 31, 2024, leading to the discovery that unauthorized parties accessed files containing employee personal information. Notifications were mailed on October 25, 2024, and Experian identity monitoring services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Aug 31, 2024

Discovered

Sep 12, 2024

Scope determined

Oct 28, 2024

Filed

vs. sector median

on median

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_32c721d973f44f442024-10-28Verified
Maine State AGbd_a3903045978c90212024-10-28Candidate
Montana State AGbd_d181dfc30b4930322024-10-28Candidate
Massachusetts State AGbd_6d944af2e087e5092024-10-29 · +1dVerified

Show 2 more filings ↓up to 3d gap

Indiana State AGbd_1c0340fd681415962024-10-25 · +3dVerified
Vermont State AGbd_aba2a82bb15542892024-10-25 · +3dVerified

Name: Solairus Aviation, LLC
norm: solairus aviation

Name: Solairus Aviation, LLC
norm: solairus aviation
Industry: Otherllm

Discovered: Aug 31, 2024
Materiality determined: Sep 12, 2024
Notification sent: Oct 25, 2024
Affected individuals: 77state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office

During the incident: Took immediate steps to secure the network
Launched an investigation
Engaged cybersecurity experts to assist with the investigation and response
Mailed notifications via U.S. First-Class mail to New Hampshire residents
Offered complimentary credit monitoring, fraud consultation, and identity theft restoration services through Experian
Established a dedicated, toll-free call center
Changes made: Examining every aspect of this event to identify additional precautions
Taking steps to enhance the security of its computer systems and the data it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGOct 25 · first

Vermont State AGOct 25 · first

California State AG+3d

Maine State AG+3d

Montana State AG+3d

New Hampshire State AG+3d · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/solairus-aviation-20241028.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 28, 2024
Raw hash: 56bd82bdf8b44fea03e935f918df4e15b2cb26dd6b36281351827bba645aefc7

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySolairus Aviation, LLC

Victim entitySolairus Aviation, LLC

Incidentdiscovered Aug 31, 2024

Stated responseTook immediate steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov