MalwareRansomwareCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedRansom DemandedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Watermark Marine Systems
bd_112b251175a492a7 · schema v1 · pii pii-v1
Full breach record for Watermark Marine Systems →Watermark Marine Systems, LLC notified the New Hampshire Attorney General of a ransomware incident affecting 150 NH residents. Unauthorized access occurred June 9-13, 2025, resulting in encryption of systems and exfiltration of names and SSNs. Notification letters were mailed August 6, 2025, offering one year of credit monitoring.
Leak gap clock⏱ Leak >30d8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed150 affectedView incident
A leak claim by akira about this victim predates this filing by 37 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/watermark-marine-systems-20250806.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 6, 2025
- Raw hash
- 90194d2a1143198dbc152c001ba0f2dd52e8a31f318e3a9f1c522815f2584f30
Reporting entity
- Name
- Watermark Marine Systemsnorm: watermark marine
- Domain
- watermarkmarine.com
Victim entity
- Name
- Watermark Marine Systemsnorm: watermark marine
- Domain
- watermarkmarine.com
Incident
- Discovered
- Jun 9, 2025
- Materiality determined
- Jul 11, 2025
- Notification sent
- Aug 6, 2025
- Affected individuals
- 150
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.