MalwareManufacturingManufacturingRansomwareData EncryptedRansom DemandedGovernment IDIdentity (basic)MediumContained

Nachi America Inc

bd_2da2cf68a3dda243 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 17, 2021

Filed

Apr 1, 2021

To disclose

15 days

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Nachi America Inc →

Nachi America, Inc. reported a ransomware attack on March 17, 2021, where an unauthorized user accessed a system housing an application. The attacker encrypted data and demanded payment. One New Hampshire resident was affected, with data including names, addresses, SSNs, and government IDs. Nachi engaged outside counsel, remediated the vulnerability, and offered Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 days

Mar 17, 2021

Discovered

Apr 1, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemountlockerbd_9c7c532d54f523302021-09-09 · +161dVerified by operator

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_c0103221915472952021-04-01Verified
Indiana State AGbd_31aa6c87e99dc8282021-03-30 · +2dVerified

Name: Nachi America Inc
norm: nachi america

Name: Nachi America Inc
norm: nachi america
Industry: Manufacturingllm

Discovered: Mar 17, 2021
Materiality determined: —
Notification sent: Mar 29, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Engaged outside counsel
Began an internal investigation into the unauthorized access
Offering identity theft protection services through Experian’s IdentityWorks
Changes made: Identified the point of access used by the attacker
Remediated that vulnerability by upgrading the security settings on the impacted container
Added a layer of authentication
Reviewing and revising its cybersecurity policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGMar 30 · first

Massachusetts State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nachi-america-20210401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2021
Raw hash: 6d296ab6e4c9a3d7191f9fe5ee8b9d8f6050ce7f6cdcba9400a4c18598a02a7f

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityNachi America Inc

Victim entityNachi America Inc

Incidentdiscovered Mar 17, 2021

Stated responseEngaged outside counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov