HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Corvias Group LLC

bd_2380f780a214ec31 · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 5, 2023

Filed

Oct 10, 2023

To disclose

5 weeks

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Corvias Group LLC →2 incidents on file

Corvias Group LLC notified the New Hampshire Attorney General that an unauthorized individual accessed one employee email account on April 18, 2023. The breach affected one NH resident's personal information. Corvias engaged external cybersecurity professionals, notified the resident on October 5, 2023, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 140 days

discovery → filing · 5 weeks / 35 days

Apr 18, 2023

Begins

Sep 5, 2023

Discovered

Oct 10, 2023

Filed

vs. sector median

14 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_6115c9eaacbab0cb2023-10-06 · +4dVerified by operator
Montana State AGbd_3bccdf7767ea26f92023-10-05 · +5dCandidate
Indiana State AGbd_c12fc1b13e1d6e462023-10-05 · +5dVerified

Name: Corvias Group LLC
norm: corvias group

Name: Corvias Group LLC
norm: corvias group
Industry: Professional Servicesllm

Discovered: Sep 5, 2023
Breach occurred: Apr 18, 2023
Undetected for: 140 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 5, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Began efforts to remediate the issue and commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals experienced in handling these types of incidents
Providing the affected resident with written notification of this incident
Offering the affected resident a complimentary one year membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGOct 5 · first

Indiana State AGOct 5 · first

Maine State AG+1d

New Hampshire State AG+5d · this page

Pattern: first filing Oct 5 (MT), last Oct 10 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/corvias-group-20231010.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2023
Raw hash: baa41385586d1cf68158469c81358720f6f9682fe00b4284b0679b0639141c5f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCorvias Group LLC

Victim entityCorvias Group LLC

Incidentdiscovered Sep 5, 2023

Stated responseBegan efforts to remediate the issue and commenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov