HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)LowContained

OSDA Contract Services

bd_32977d9a7a0ec93c · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 2, 2024

Filed

Sep 25, 2024

To disclose

8 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for OSDA Contract Services →

OSDA Contract Services notified the NH AG of a data security incident discovered on August 2, 2024, involving unauthorized access to employee personal information. One NH resident was affected. OSDA took systems offline, engaged cybersecurity experts, terminated access, and provided free identity protection services to the affected individual.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d8 weeks discovery → filing

Incident timeline

discovery → filing · 8 weeks / 54 days

Aug 2, 2024

Discovered

Aug 22, 2024

Scope determined

Sep 25, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by blacksuit about this victim predates this filing by 44 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_5cd78a75e92578e62024-08-12 · +44dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_c71ed173dd9cae102024-09-25Verified

Name: OSDA Contract Services
norm: osda contract
Domain: osda.com
Industry: electronics assembly manufacturing

Name: OSDA Contract Services
norm: osda contract
Domain: osda.com
Industry: electronics assembly manufacturing
Industry: Manufacturingllm

Discovered: Aug 2, 2024
Materiality determined: Aug 22, 2024
Notification sent: Sep 25, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took systems offline
Engaged cybersecurity to secure its network and investigate
Terminated the unauthorized access on its network
Began an investigation into what happened
Sent notice to the potentially affected individuals
Offering them free identity monitoring services
Examining its cyber environment in order to consider what steps might prevent a similar incident from happening in the future
Changes made: Examining its cyber environment in order to consider what steps might prevent a similar incident from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 25 · first

New Hampshire State AGSep 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/osda-contract-services-20240925.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 25, 2024
Raw hash: 485add06c146d037bfb3e542df93776452730d21764df9da78a1c43c107e6006

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityOSDA Contract Services

Victim entityOSDA Contract Services

Incidentdiscovered Aug 2, 2024

Stated responseTook systems offline

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov