HackingVulnerability ExploitCapture Stored DataCLOPN-DayData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
RCI, LLC
bd_0c2271b8e6a81370 · schema v1 · pii pii-v1
Full breach record for RCI, LLC →RCI, LLC notified the NH Attorney General of a security incident involving MOVEit Transfer. The CLOP group exploited a vulnerability in the software between May 31 and June 1, 2023, to access files. RCI determined on January 19, 2024, that government ID numbers of 10 NH residents were compromised. RCI mailed notifications on March 1, 2024, and offered one year of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_49c3ccfedb62aae6Montana State AGfiled 2024-03-01Candidate
- bd_b1f0369446f8ee14California State AGCLOPfiled 2024-03-01Verified
- bd_d7c523ed63f056b5Vermont State AGCLOPfiled 2024-03-01Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/rci-20240301.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2024
- Raw hash
- afc618591860afa54d05e62923148a647660e05cea8e276326234c3b26552c6e
Reporting entity
- Name
- RCI, LLCnorm: rci
Victim entity
- Name
- RCI, LLCnorm: rci
Incident
- Discovered
- Jan 19, 2024
- Materiality determined
- —
- Notification sent
- Mar 1, 2024
- Affected individuals
- 10
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access· CLOP
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
- Threat actor
- CLOPExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.