MalwareRetail & ConsumerRetailRansomwareData EncryptedCustomer Data InvolvedFinancial accountLowContained

Citarella Operating, LLC and Lockwood & Winant Seafood, LLC

bd_0d57682ca12ddcb3 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 3, 2023

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Citarella Operating, LLC and Lockwood & Winant Seafood, LLC →

Citarella Operating, LLC and Lockwood & Winant Seafood, LLC experienced a ransomware attack on February 10, 2023. The incident potentially impacted the credit card information of one New Hampshire resident. The company secured its systems, rebuilt impacted infrastructure, deployed endpoint detection, and offered credit monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 10, 2023

Begins

Jul 3, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_343fee446a912dd32023-06-30 · +3dVerified
Maine State AGbd_b212db8de4181d822023-06-30 · +3dCandidate

Name: Citarella Operating, LLC and Lockwood & Winant Seafood, LLC
norm: citarella operating llc and lockwood winant seafood

Name: Citarella Operating, LLC and Lockwood & Winant Seafood, LLC
norm: citarella operating llc and lockwood winant seafood
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Feb 10, 2023
Materiality determined: —
Notification sent: Jun 30, 2023
Affected individuals: 1state-resident count only
Data types: Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Took immediate steps to secure their systems
Investigated the nature and scope of the incident with assistance from third-party experts
Arranged for the individual to enroll in free credit monitoring and related services
Changes made: Rebuilt all of the systems impacted by the Incident
Deployed endpoint detection and response within their environments
Reset passwords
Thoroughly reviewed and upgraded their data security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJun 30 · first

Maine State AGJun 30 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/citarella-operating-lockwood-winant-seafood-20230703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 3, 2023
Raw hash: 1f4c95062591db81b9eb8e4fd963fcef263f7b4d590c95f31303dab07bf6402d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCitarella Operating, LLC and Lockwood & Winant Seafood, LLC

Victim entityCitarella Operating, LLC and Lockwood & Winant Seafood, LLC

IncidentRansomware

Stated responseTook immediate steps to secure their systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov