HackingTechnologyInformationStolen CredentialsData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Aspen Avionics Digital Flight Display Systems

bd_24b48fd10ef33131 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 7, 2021

Filed

May 31, 2022

To disclose

29 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Aspen Avionics Digital Flight Display Systems →

Aspen Avionics, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting one NH resident. Unauthorized access occurred between Aug 23 and Nov 5, 2021. Data exposed included name, SSN, bank account, driver's license, and passport number. Notification sent May 24, 2022.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 76 days

discovery → filing · 29 weeks / 205 days

Aug 23, 2021

Begins

Nov 7, 2021

Discovered

May 31, 2022

Filed

vs. sector median

+11 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: Aspen Avionics Digital Flight Display Systems
norm: aspen avionics digital flight display
Domain: aspenavionics.com
Industry: Technologyllm

Discovered: Nov 7, 2021
Breach occurred: Aug 23, 2021 – Nov 5, 2021
Undetected for: 76 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 24, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Office of the Attorney General of New HampshireCooperating in the law enforcement investigation relating to this incident
Initial access: valid_credentials

During the incident: Engaged external cybersecurity professionals
Reported the incident to the Federal Bureau of Investigation (FBI)
Offering the affected resident complimentary one-year membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(205 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aspen-avionics-20220531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2022
Raw hash: 7de4fb41c9ca0461336757c737406d4a1e4e3ea81f43332240f1e8655a681671

Reporting entityMCDONALD HOPKINS LLC

Victim entityAspen Avionics Digital Flight Display Systems

Incidentdiscovered Nov 7, 2021

Stated responseEngaged external cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov