HackingManufacturingManufacturingStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDFinancial accountMediumContained

HP Hood LLC

bd_2b02a685b6f194c2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 12, 2022

Filed

Jul 1, 2022

To disclose

16 weeks

Affected

201state residents only

Linked

2 filings

Confidence

66%

HP Hood LLC reported a cybersecurity incident to the NH Attorney General. Unauthorized access occurred March 2-12, 2022, discovered March 12, 2022. Data exposed: names, SSNs, driver's licenses, financial account numbers. 201 NH residents notified June 30, 2022. FBI notified. Response included system isolation, credential resets, and credit monitoring offer.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d16 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 10 days

discovery → filing · 16 weeks / 111 days

Mar 2, 2022

Begins

Mar 12, 2022

Discovered

Jul 1, 2022

Filed

vs. sector median

+5 wks slower

This filing is one of 2 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 109 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_a34f9b1617451f2a2022-03-14 · +109dCandidate

Name: HP Hood LLC
norm: hp hood
Domain: hphood.com
Industry: Manufacturing

Name: HP Hood LLC
norm: hp hood
Domain: hphood.com
Industry: Manufacturing
Industry: Manufacturingllm

Discovered: Mar 12, 2022
Breach occurred: Mar 2, 2022 – Mar 12, 2022
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 30, 2022
Affected individuals: 201state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice
Initial access: valid_credentials

During the incident: Shutting down and isolating systems
Disabling accounts and systems that might have been compromised
Restricting egress network traffic
Changing firewall rules
Modifying internal defenses based on identified indicators of compromise
Implementing additional threat detection analysis tools and capabilities to monitor for and identify potentially malicious activity
Enhancing password complexity on all systems
Reviewing permissions for sensitive and restricted data
Notified the Federal Bureau of Investigation
Changes made: Offering two years of complimentary credit monitoring service through Identity Theft Guard Solutions, Inc. d/b/a IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(111 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hp-hood-20220701.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2022
Raw hash: c00ca3dc2c2b6c97410072e6260a4e3ca4ec2e58d67cb2e7be0471c0a1c4fc2f

Linked disclosures

Ransomware claims (1)

Reporting entityHP Hood LLC

Victim entityHP Hood LLC

Incidentdiscovered Mar 12, 2022

Stated responseShutting down and isolating systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov