HackingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
cgm
bd_17cf47586e44d973 · schema v1 · pii pii-v1
Full breach record for cgm →CGM, Inc. reports a supplemental breach notification to New Hampshire. An unknown actor accessed the network on Dec 28, 2022. Initial notice was sent June 2023; supplemental notice sent Feb 14, 2024, to 4 additional residents (2 NH, 2 RI). Data involved likely includes PII/SSN. Credit monitoring offered. Investigation ongoing.
Leak gap clock✗ Leak >180d14 months discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit2 about this victim predates this filing by 717 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6c91726908581280Montana State AGfiled 2024-02-14Candidate
- bd_edabe55eaf55e042California State AGfiled 2024-02-14Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cgm-20240214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2024
- Raw hash
- 9673e5bf3929b940a5da870cc19aee18e1f012ea19f53739f6d14bf75b2be7d9
Reporting entity
- Name
- cgm
Victim entity
- Name
- cgm
Incident
- Discovered
- Dec 28, 2022
- Materiality determined
- —
- Notification sent
- Feb 14, 2024
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcementProviding written notice of this incident to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 months(413 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.