MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained

Henry

bd_0eec8b7fae81952c · schema v1 · pii pii-v1

Henry Company experienced a ransomware attack between January 21 and January 29, 2022, impacting servers and workstations in the US and Canada. The company discovered unauthorized access on March 11, 2022, affecting customer names, driver's license numbers, and Social Security numbers. Henry engaged forensic investigators, took systems offline, and provided 24 months of identity theft protection via Experian. The incident is currently contained.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

bd_af4cbd2f1f9d18b7Leak Sitequantumfiled 2022-04-29(10d gap)Candidate

Regulatory filings (3) · sorted by filing gap

bd_26de89cec27a546bMaine State AGfiled 2022-04-20Verified by operator
bd_d78f812331de9ea0Montana State AGfiled 2022-04-20Verified by operator
bd_57e9a023321e3d6aMaine State AGfiled 2022-03-29(22d gap)Verified by operator

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/henry-20220420.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2022
Raw hash: f307124e8df96ad63664679f4addbfd31db00a0485ca274983e88af057e9b720

Reporting entity

Name: Henry
norm: henry

Victim entity

Name: Henry
norm: henry

Incident

Discovered: Mar 11, 2022
Materiality determined: —
Notification sent: Apr 20, 2022
Affected individuals: Not disclosed
Data types: IDENTITY_GOVERNMENTIDENTITY_BASIC
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

Compliance

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.