MalwareFinancial ServicesFinanceRansomwareSupply Chain (3P Vendor)Data EncryptedRansom DemandedIdentity (basic)Government IDMediumActive

BARINGS LLC

bd_18bdabc852e534fb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 12, 2024

Filed

Mar 29, 2024

To disclose

11 weeks

Affected

6state residents only

Linked

4 filings

Confidence

66%

Full breach record for BARINGS LLC →2 incidents on file

Barings LLC notified the NH AG of a ransomware incident affecting its third-party recordkeeper's sub-processor (IMS). Unauthorized access occurred on Oct 29, 2023. Barings discovered the incident on Jan 12, 2024. 6 NH residents may be affected. PII including SSN and DOB involved. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 75 days

discovery → filing · 11 weeks / 77 days

Oct 29, 2023

Begins

Jan 12, 2024

Discovered

Mar 29, 2024

Filed

vs. sector median

+2 wks slower

This filing is one of 4 about the same incident.View merged incident

Part of INFOSYS MCCAMISH SYSTEMS, LLC supply-chain incident (2024) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_b48cb76c7e6778562024-03-26 · +3dVerified
Montana State AGbd_5394a0334b7a71632024-03-25 · +4dCandidate
Maine State AGbd_d0efb71413b646412024-03-25 · +4dCandidate

Name: BARINGS LLC
norm: barings
Domain: barings.com

Name: BARINGS LLC
norm: barings
Domain: barings.com
Industry: Financial Servicesllm

Discovered: Jan 12, 2024
Breach occurred: Oct 29, 2023
Undetected for: 75 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2024
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General
Third party: via Infosys McCamish Systems LLC
Initial access: valid_credentials

During the incident: Coordinating with Newport to determine whether the incident had affected personal information
Providing recommendations and steps to help protect personal information
Arranged to provide individuals whose were potentially affected with identity protection and credit monitoring services for at no cost
Changes made: Offering identity protection and credit monitoring services for two years at no cost through Experian IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGMar 25 · first

Maine State AGMar 25 · first

Massachusetts State AG+1d

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/barings-newport-group-20240329.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 29, 2024
Raw hash: 252d34d36bb1fc65c50564d6eb10f7e1f27b063b786f9752cbcae94ef608676b

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBARINGS LLC

Victim entityBARINGS LLC

Incidentdiscovered Jan 12, 2024

Stated responseCoordinating with Newport to determine whether the incident had affected personal information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov