HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

ORION SYSTEMS INTEGRATORS, LLC

bd_1161d6b7dedd999c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 26, 2022

Filed

Nov 30, 2022

To disclose

18 weeks

Affected

5state residents only

Linked

5 filings

Confidence

65%

Full breach record for ORION SYSTEMS INTEGRATORS, LLC →

Orion Systems Integrators, LLC. notified the New Hampshire Attorney General of an unauthorized third-party intrusion occurring July 25-26, 2022. The incident affected 5 NH residents, exposing names, addresses, and Social Security numbers. Orion engaged third-party experts, implemented additional security measures, and provided 24 months of TransUnion credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 18 weeks / 127 days

Jul 25, 2022

Begins

Jul 26, 2022

Discovered

Nov 1, 2022

Scope determined

Nov 30, 2022

Filed

vs. sector median

1 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_664f5b19540f59b62022-11-30Candidate
Maine State AGbd_79d3ae96b81a4c4a2022-11-30Verified
Massachusetts State AGbd_7e3113d30663583b2022-11-30Verified
Indiana State AGbd_f98e07118195b9532022-11-30Verified

Name: ORION SYSTEMS INTEGRATORS, LLC
norm: orion systems integrators

Name: ORION SYSTEMS INTEGRATORS, LLC
norm: orion systems integrators
Industry: Technologyllm

Discovered: Jul 26, 2022
Breach occurred: Jul 25, 2022 – Jul 26, 2022
Undetected for: 1 dayoccurrence → discovery
Materiality determined: Nov 1, 2022
Notification sent: Nov 30, 2022
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Undertook a review, working with third party experts, to determine the nature and scope of the unauthorized access
Implemented additional security measures to help further protect against this type of incident going forward
Notify affected individuals by mail
Provide 24 months of credit monitoring services from TransUnion
Changes made: Implemented additional security measures to help further protect against this type of incident going forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGNov 30 · first

Maine State AGNov 30 · first

Massachusetts State AGNov 30 · first

Indiana State AGNov 30 · first

New Hampshire State AGNov 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/orion-systems-integrators-20221130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2022
Raw hash: 8bbb672539af68130ef8b89ea3280b6b2fbe689ec00b9f402a014ea66aba4d29

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityORION SYSTEMS INTEGRATORS, LLC

Victim entityORION SYSTEMS INTEGRATORS, LLC

Incidentdiscovered Jul 26, 2022

Stated responseUndertook a review, working with third party experts, to determine the nature and scope of the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov