MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICLowContained
Shield Packaging Co., Inc.
bd_1c79191dc6bd915b · schema v1 · pii pii-v1
Full breach record for Shield Packaging Co., Inc. →Shield Packaging Co., Inc. notified the New Hampshire Attorney General of a ransomware attack on April 18, 2023. The attack encrypted systems, but no ransom was paid. Forensic investigation initially found no exfiltration, but dark web monitoring later revealed documents posted by attackers. A subsequent review identified PII of approximately 600 individuals (21 in NH). Shield engaged forensic experts, notified the FBI, and provided credit monitoring to affected individuals. Notification to the AG was filed on November 14, 2023.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_e40b98d722bd3e23Maine State AGfiled 2023-11-14Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/shield-packaging-20231114.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 14, 2023
- Raw hash
- 670a6b75c1e3b6d0be5ca2302d9c675a32682fd4363417157991ae59162e7ca7
Reporting entity
- Name
- Shield Packaging Co., Inc.norm: shield packaging
Victim entity
- Name
- Shield Packaging Co., Inc.norm: shield packaging
Incident
- Discovered
- Apr 18, 2023
- Materiality determined
- —
- Notification sent
- Nov 14, 2023
- Affected individuals
- 600
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBIFiled notice with New Hampshire Attorney General
Compliance
- Time to disclose
- 30 weeks(210 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.