MalwareTelecom & MediaTechnologyInformationRansomwareStolen CredentialsContiData ExfiltratedData EncryptedRansom DemandedData Leak ThreatenedEmployee Data InvolvedActor NamedIdentity (basic)Government IDEmploymentHealth (basic)Financial accountFinancial credentialsPIIMediumContained

SAC Wireless, LLC

bd_0a283fc75fc50324 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 16, 2021

Filed

Aug 19, 2021

To disclose

9 weeks

Affected

3state residents only

Linked

8 filings

Confidence

68%

Full breach record for SAC Wireless, LLC →

SAC Wireless experienced a ransomware attack by the threat actor Conti. On June 16, 2021, the company became aware that unauthorized third-party accessed internal infrastructure, executed files, exfiltrated data to cloud storage, and deployed ransomware to encrypt systems. Conti demanded a ransom, which was declined. The incident potentially compromised personal information of current and former employees, including names, SSNs, government IDs, health insurance info, and employment records. 3 New Hampshire residents were confirmed affected. SAC Wireless engaged forensic experts, notified the FBI, and implemented remediation measures including MFA expansion and firewall changes.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d9 weeks discovery → filing

Incident timeline

discovery → filing · 9 weeks / 64 days

Jun 16, 2021

Discovered

Aug 19, 2021

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_4bf80acafee5c6912021-06-16 · +64dVerified by operator

Regulatory filings (6) · sorted by filing gap

Montana State AGContibd_0871517e517fa88b2021-08-20 · +1dVerified
Indiana State AGbd_606f1c5039b8e3922021-08-20 · +1dVerified
Maine State AGbd_c93452cb855995bc2021-08-23 · +4dVerified
California State AGContibd_b08fbdce8af290bb2021-08-26 · +7dVerified

Show 2 more filings ↓up to 230d gap

Massachusetts State AGbd_6b390cbb764567602021-09-02 · +14dVerified
Illinois State AGbd_81f21aabf85453042021-01-01 · +230dCandidate

Name: SAC Wireless, LLC
norm: sac wireless
Domain: sacw.com

Name: SAC Wireless, LLC
norm: sac wireless
Domain: sacw.com
Industry: Telecom & MediallmTechnologyllm

Discovered: Jun 16, 2021
Materiality determined: —
Notification sent: Aug 19, 2021
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDEmploymentHealth (basic)Financial accountFinancial credentialsPII
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware· Conti
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1190 Exploit Public-Facing Application
Threat actor: ContiExternalFinancial
Regulator citations: Notified the FBI

During the incident: Deployed multiple security tools and infrastructure enhancements to contain the incident
Contacted the FBI
Engaged external counsel and cyber security experts
Notified potentially impacted employees via email on June 21
Offering affected individuals free identity theft and credit monitoring services for 24 months
Changes made: Changing firewall rules
Disconnecting VPN connections
Activating conditional access geo-location policies to limit non-U.S. access
Deploying additional network and endpoint monitoring tools
Providing additional employee training
Expanding multi-factor authentication
Deploying additional threat-hunting and endpoint detection and response tools
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

New Hampshire State AG+230d · this page

Montana State AG+231d

Indiana State AG+231d

Maine State AG+234d

California State AG+237d

Massachusetts State AG+244d

Pattern: first filing Jan 1 (IL), last Sep 2 (MA) — a 244-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sac-wireless-20210819.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2021
Raw hash: d49e81b0571903e8919e6c98db293e8d0a8a0ed5aa9ecba31d4153f468d0d9ff

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entitySAC Wireless, LLC

Victim entitySAC Wireless, LLC

Incidentdiscovered Jun 16, 2021

Stated responseDeployed multiple security tools and infrastructure enhancements to contain the incident

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov