MalwareManufacturingRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Henry Company

bd_0eec8b7fae81952c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 11, 2022

Filed

Apr 20, 2022

To disclose

6 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

62%

Full breach record for Henry Company →

Henry Company experienced a ransomware attack between January 21 and January 29, 2022, impacting servers and workstations in the US and Canada. The company discovered unauthorized access on March 11, 2022, affecting customer names, driver's license numbers, and Social Security numbers. Henry engaged forensic investigators, took systems offline, and provided 24 months of identity theft protection via Experian. The incident is currently contained.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 49 days

discovery → filing · 6 weeks / 40 days

Jan 21, 2022

Begins

Mar 11, 2022

Discovered

Apr 20, 2022

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitequantumbd_af4cbd2f1f9d18b72022-04-29 · +10dCandidate

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_04fba9d34142ef402022-04-20Verified by operator
Maine State AGbd_26de89cec27a546b2022-04-20Verified by operator
Massachusetts State AGbd_4756248a3fe0de9e2022-04-20Verified by operator
Montana State AGbd_d78f812331de9ea02022-04-20Verified by operator

Show 1 more filing ↓up to 22d gap

Maine State AGbd_57e9a023321e3d6a2022-03-29 · +22dVerified by operator

Name: Henry Company
norm: henry
Domain: henry.com

Name: Henry Company
norm: henry
Domain: henry.com

Discovered: Mar 11, 2022
Breach occurred: Jan 21, 2022 – Jan 29, 2022
Undetected for: 49 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 20, 2022
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged a leading third-party cybersecurity forensics firm to restore the security and integrity of our systems
Took the impacted systems offline to secure those systems
Scanned and reviewed systems to verify that they were safe to use prior to bringing them back online
Worked closely with external industry-leading service providers to implement additional incremental security measures
Purchased twenty-four (24) months of identity theft protection services (at no cost to you) through Experian
Changes made: Implemented additional incremental security measures to protect our systems
Defend against this type of unlawful activity in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGMar 29 · first

Indiana State AG+22d

Maine State AG+22d

Massachusetts State AG+22d

Montana State AG+22d

New Hampshire State AG+22d · this page

Pattern: first filing Mar 29 (ME), last Apr 20 (NH) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/henry-20220420.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2022
Raw hash: f307124e8df96ad63664679f4addbfd31db00a0485ca274983e88af057e9b720

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityHenry Company

Victim entityHenry Company

Incidentdiscovered Mar 11, 2022

Stated responseEngaged a leading third-party cybersecurity forensics firm to restore the security and integrity of our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov