MalwareManufacturingManufacturingRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)FinancialMediumContained

Dayton Superior Corporation

bd_01e854a6eac5f768 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 24, 2022

Filed

Aug 29, 2022

To disclose

5 weeks

Affected

2state residents only

Linked

4 records

Confidence

67%

Full breach record for Dayton Superior Corporation →2 incidents on file

Dayton Superior Corporation, a manufacturing organization, experienced a ransomware cyberattack on July 24, 2022, where internal databases and files were encrypted. The incident compromised HR data for current and former employees, including names, dates of birth, SSNs, driver's license numbers, and health insurance data. Two New Hampshire residents were affected. The company contained the incident, engaged forensic experts, notified law enforcement (FBI, DHS), and offered two years of credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 36 days

Jul 24, 2022

Discovered

Aug 29, 2022

Filed

This filing is one of 4 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 36 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_696e652627d241522022-07-24 · +36dVerified by operator

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_be49042a2dabe77f2022-08-31 · +2dVerified by operator
Indiana State AGbd_57a485bd8171cdc52022-08-19 · +10dVerified by operator

Name: Dayton Superior Corporation
norm: dayton superior
Domain: daytonsuperior.com
Industry: Manufacturing

Name: Dayton Superior Corporation
norm: dayton superior
Domain: daytonsuperior.com
Industry: Manufacturing
Industry: Manufacturingllm

Discovered: Jul 24, 2022
Materiality determined: —
Notification sent: Aug 19, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney GeneralNotified the Federal Bureau of InvestigationNotified the U.S. Department of Homeland Security

During the incident: Isolated the security incident and restored networks and systems to a normal state of operation
Engaged leading security experts to further investigate the matter and help assess the scope of the cyberattack
Notified all individuals whose personal data may have been affected
Offered each impacted individual and their immediate family members complimentary credit monitoring services for two years through Equifax
Established a dedicated call support line and website to answer questions
Engaged both the Federal Bureau of Investigation and the U.S. Department of Homeland Security and are continuing to cooperate with their investigations
Changes made: Retained independent third-party IT security consultants to analyze the incident, including information security programs and tools and the status of data security hygiene
Continues to analyze the incident to ensure the strength of information security programs and tools and data security hygiene to prevent future security incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

Indiana State AGAug 19 · first

New Hampshire State AG+10d · this page

New Hampshire State AG+12d

Pattern: first filing Aug 19 (IN), last Aug 31 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dayton-superior-20220829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2022
Raw hash: 5faf3400196f7772bb23d85f09ad1129225a03fee8604fa2bcf898ec1fa3c276

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityDayton Superior Corporation

Victim entityDayton Superior Corporation

Incidentdiscovered Jul 24, 2022

Stated responseIsolated the security incident and restored networks and systems to a normal state of operation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov