HackingManufacturingManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Bonland Industries, Inc.

bd_039c3c053b197da0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 23, 2021

Filed

Sep 7, 2021

To disclose

15 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Bonland Industries, Inc. →

Bonland Industries, Inc. notified the NH Attorney General of a data security incident affecting approximately one New Hampshire resident. On May 23, 2021, the company detected suspicious activity and determined an unknown actor accessed its network and removed information. The compromised data included name, address, and Social Security number. Bonland engaged forensic specialists, contained the incident, and is implementing EDR tools, MFA, and security training. Affected individuals are offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 107 days

May 23, 2021

Begins

May 23, 2021

Discovered

Sep 7, 2021

Filed

vs. sector median

+5 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_2550cda267fe3a122021-09-03 · +4dVerified
Massachusetts State AGbd_eaa6f11f940719292021-09-03 · +4dVerified

Name: Bonland Industries, Inc.
norm: bonland industries

Name: Bonland Industries, Inc.
norm: bonland industries
Industry: Manufacturingllm

Discovered: May 23, 2021
Breach occurred: May 23, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 3, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Reported this event to federal law enforcementNotifying appropriate state regulators

During the incident: Initiated an investigation
Conducted investigation with the assistance of third-party computer forensic specialists
Conducted a comprehensive programmatic and manual review of the data potentially at risk
Undertook a thorough manual review of its internal records to confirm the individuals’ identities and locate accurate contact information
Providing written notice of this event to affected individuals
Providing individuals whose personal information was impacted by this event with access to credit monitoring and identity restoration services through Experian for twenty-four (24) months at no cost to affected individuals
Providing affected individuals with guidance on how to better protect against identity theft and fraud
Reported this event to federal law enforcement and cooperated with its investigation
Notifying appropriate state regulators
Changes made: Implemented additional safeguards which include installing an EDR tool throughout the environment
In the process of implementing multifactor authentication
Developing a cybersecurity training program for its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(107 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGSep 3 · first

Massachusetts State AGSep 3 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bonland-industries-20210907.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2021
Raw hash: 5d8319e259896509c09b04b7e9d64cfb96fc4c5fab01d36454036fd1b1f6f429

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBonland Industries, Inc.

Victim entityBonland Industries, Inc.

Incidentdiscovered May 23, 2021

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov