MalwareOtherRansomwareData ExfiltratedData EncryptedRansom DemandedGovernment IDIdentity (basic)MediumContained

Wm. G. Roe & Sons, Inc.

bd_31f056314018be1e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 28, 2021

To disclose

—

Affected

1state residents only

Linked

7 filings

Confidence

66%

Full breach record for Wm. G. Roe & Sons, Inc. →

Wm. G. Roe & Sons, Inc. notified the New Hampshire Attorney General of a mid-June 2021 ransomware attack affecting one NH resident. Attackers gained unauthorized access, exfiltrated employee names and SSNs, and deployed ransomware. The company engaged forensic experts and offered one year of Kroll identity monitoring. Discovery date is not explicitly stated.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 1, 2021

Begins

Sep 28, 2021

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_6208f295b4bb06c82021-09-28Verified
Oregon State AGbd_8bd37935ef945af22021-09-28Candidate
Indiana State AGbd_9e870af2cb921fc42021-09-28Verified
Washington State AGbd_a3f027d7090b7e302021-09-28Verified

Show 2 more filings ↓

Montana State AGbd_a4fba58900eb6cde2021-09-28Verified
Maine State AGbd_a78cd2c6bcf2ae112021-09-28Verified

Name: Wm. G. Roe & Sons, Inc.
norm: wm g roe sons

Name: Wm. G. Roe & Sons, Inc.
norm: wm g roe sons
Industry: Otherllm

Discovered: —
Breach occurred: Jun 1, 2021
Materiality determined: —
Notification sent: Sep 28, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Engaged a third-party cybersecurity team to assist with the recovery of its systems
Engaged a cybersecurity forensic expert to investigate whether any files were accessed or removed by the threat actor
Secured the services of Kroll to provide identity monitoring at no cost to affected individuals for one year
Changes made: Installed additional security measures across its environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Massachusetts State AGSep 28 · first

Oregon State AGSep 28 · first

Indiana State AGSep 28 · first

Washington State AGSep 28 · first

Montana State AGSep 28 · first

Maine State AGSep 28 · first

New Hampshire State AGSep 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wm-g-roe-sons-20210928.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 28, 2021
Raw hash: 3137d604116f266e7cc3d44f4f9d9e25ea8ab8bd51b95c624e71b0b655474899

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWm. G. Roe & Sons, Inc.

Victim entityWm. G. Roe & Sons, Inc.

IncidentRansomware

Stated responseEngaged a third-party cybersecurity team to assist with the recovery of its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov