MalwareTransportation & LogisticsTransportationRansomwareData ExfiltratedData EncryptedTargetedIdentity (basic)Government IDMediumContained

United Wheels Inc.

bd_1539bb6ca6d982c7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 30, 2021

Filed

Nov 9, 2021

To disclose

19 weeks

Affected

11state residents only

Linked

5 filings

Confidence

66%

Full breach record for United Wheels Inc. →

United Wheels Inc. notified the New Hampshire Attorney General of a data event affecting 11 residents. Unauthorized access occurred June 29-30, 2021, involving file encryption and exfiltration. Data included names and SSNs. Notification sent Nov 5, 2021. FBI notified; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 19 weeks / 132 days

Jun 29, 2021

Begins

Jun 30, 2021

Discovered

Nov 9, 2021

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_89f406343277e92c2021-11-12 · +3dVerified
Maine State AGbd_2c124f5702dbea482021-11-05 · +4dCandidate
Montana State AGbd_5a31a22dd9308bc52021-11-05 · +4dVerified
Indiana State AGbd_9942e1327d045e992021-11-05 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: United Wheels Inc.
norm: united wheels
Industry: Transportation & Logisticsllm

Discovered: Jun 30, 2021
Breach occurred: Jun 29, 2021 – Jun 30, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Nov 5, 2021
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of InvestigationNotified law enforcement of this incident and has been cooperating with the investigation

During the incident: Engaged third-party incident response specialists, including network security specialists and a forensic investigation firm
Moved quickly to investigate and respond to the incident
Informed the Federal Bureau of Investigation
Notified potentially affected individuals
Reviewed and enhanced the existing security measures relating to the involved network
Isolated and terminated suspicious activity identified on the potentially affected systems
Conducted a thorough forensic analysis of these systems
Confirmed that patching and updating was current within the involved network
Reset all passwords
Confirmed that multi-factor authentication was appropriately implemented
Provided access to credit monitoring services for twenty-four (24) months
Notified law enforcement of this incident and has been cooperating with the investigation
Changes made: Enhanced the existing security measures relating to the involved network
Confirmed that multi-factor authentication was appropriately implemented
Confirmed that patching and updating was current within the involved network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(132 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGNov 5 · first

Montana State AGNov 5 · first

Indiana State AGNov 5 · first

New Hampshire State AG+4d · this page

Massachusetts State AG+7d

Pattern: first filing Nov 5 (ME), last Nov 12 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/united-wheels-20211109.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2021
Raw hash: 33b4b43bac31d0eb7a8bdffcc0e85ea3fb8ddff5942157e9628f4c561114e94a

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityUnited Wheels Inc.

Incidentdiscovered Jun 30, 2021

Stated responseEngaged third-party incident response specialists, including network security specialists and a forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov