MalwareManufacturingRetail & ConsumerManufacturingRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Wangs Alliance Corporation

bd_21f20a812ba78ed7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 2, 2021

Filed

Jan 10, 2022

To disclose

10 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Wangs Alliance Corporation →

Wangs Alliance Corporation d/b/a WAC Lighting notified the NH AG that a cyberattack occurred between March 11 and November 2, 2021, affecting 2 NH residents. Malware encrypted network drives. Data potentially exposed included names, SSNs, passport info, and credit card numbers. WAC engaged forensic experts, reset passwords, deployed EDR, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 236 days

discovery → filing · 10 weeks / 69 days

Mar 11, 2021

Begins

Nov 2, 2021

Discovered

Jan 10, 2022

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_ae08e7bb312ba4502022-01-13 · +3dVerified
Montana State AGbd_686adcf18ad266f12022-01-04 · +6dCandidate
Indiana State AGbd_faec684ae9a693172022-01-04 · +6dVerified

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Wangs Alliance Corporation
norm: wangs alliance
Also named: Wangs Alliance Corporationdba oflegal entity
WAC Lightingdba oftrade name
Industry: ManufacturingllmRetail & Consumerllm

Discovered: Nov 2, 2021
Breach occurred: Mar 11, 2021 – Nov 2, 2021
Undetected for: 236 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 11, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Commenced an investigation to determine the scope of the Incident
Working with its information technology team and third-party forensic experts
Changed passwords
Deployed an end point monitoring solution
Began the process of upgrading its virus and malware protections
Arranged for ID theft and credit monitoring services
Changes made: Reexamining its current privacy and data security policies and procedures
Performed a global password reset
Deployed endpoint detection and response software throughout the enterprise
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGJan 4 · first

Indiana State AGJan 4 · first

New Hampshire State AG+6d · this page

Massachusetts State AG+9d

Pattern: first filing Jan 4 (MT), last Jan 13 (MA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wangs-alliance-dba-wac-lighting-20220110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 10, 2022
Raw hash: 3b3bbdea6592039529f49d3bf0cb4b83bc63eaf649ab12e026413e8c007c063f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityJackson Lewis

Victim entityWangs Alliance Corporation

Incidentdiscovered Nov 2, 2021

Stated responseCommenced an investigation to determine the scope of the Incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov