MalwareGovernmentGovernmentRansomwareData EncryptedData ExfiltratedEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumContained

Metropolitan Area Planning Council

bd_0cb90db16d4eb322 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 18, 2023

Filed

Jan 19, 2024

To disclose

9 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for Metropolitan Area Planning Council →

Metropolitan Area Planning Council (MAPC) experienced a ransomware attack on November 18, 2023. The unauthorized actor encrypted systems and claimed to have exfiltrated data. Affected individuals are current employees whose personal information, including Social Security numbers, names, and dates of birth, may have been acquired. MAPC contained the incident by shutting off network access and engaged forensic investigators. Credit monitoring and fraud assistance are being offered to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 62 days

Nov 18, 2023

Begins

Nov 18, 2023

Discovered

Jan 19, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_3c9bb32f6299fe202024-01-18 · +1dCandidate
Massachusetts State AGbd_9ddcb69d667f89cc2024-01-18 · +1dVerified

Name: Metropolitan Area Planning Council
norm: metropolitan area planning council

Name: Metropolitan Area Planning Council
norm: metropolitan area planning council
Industry: Governmentllm

Discovered: Nov 18, 2023
Breach occurred: Nov 18, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 15, 2023
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Employment
Data elements: Date of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Immediately shutting off all access to the network
Engaged a specialized third-party forensic incident response firm to assist with securing the network environment and investigating the extent of unauthorized activity
Changes made: Offering Triple Bureau Credit Monitoring services at no charge for twenty-four months
Providing proactive fraud assistance through Cyberscout through Identity Force
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGJan 18 · first

Massachusetts State AGJan 18 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/metropolitan-area-planning-council-20240118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 19, 2024
Raw hash: 1cd580b80e054b8a2b3e28d115cb666e6f0c75d70520f2973f123e154e025c8a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMetropolitan Area Planning Council

Victim entityMetropolitan Area Planning Council

Incidentdiscovered Nov 18, 2023

Stated responseImmediately shutting off all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov