HackingManufacturingGovernment IDIdentity (basic)MediumContained

AMPHENOL CANADA CORP.

bd_37b639e1f9a39963 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 20, 2021

Filed

Oct 13, 2021

To disclose

8 weeks

Affected

1state residents only

Confidence

66%

Full breach record for AMPHENOL CANADA CORP. →2 incidents on file

Amphenol Canada Corporation notified the NH Attorney General of a security incident where an unauthorized actor accessed files containing a New Hampshire resident's name and passport number between August 16-20, 2021. The breach was discovered on August 20, 2021. The company took systems offline, reported to law enforcement, and notified the single affected individual. Remediation included enhanced network security, credential resets, and MFA implementation.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 8 weeks / 54 days

Aug 16, 2021

Begins

Aug 20, 2021

Discovered

Oct 13, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: AMPHENOL CANADA CORP.
norm: amphenol canada

Name: AMPHENOL CANADA CORP.
norm: amphenol canada

Discovered: Aug 20, 2021
Breach occurred: Aug 16, 2021 – Aug 20, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 8, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took its systems offline
Reported the incident to law enforcement
Commenced an investigation
Notified the affected individual via email
Sent the individual a formal notification letter through U.S. mail
Offering complimentary Financial/Dark Web/Social Media account monitoring via Identity Force
Established a dedicated, phone number for individuals to call
Changes made: Enhanced its network security systems
Reset all users’ login credentials
Implemented multifactor authentication for all VPN users
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/amphenol-canada-20211013.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 13, 2021
Raw hash: c9a06c2b6103294f4d0b15e3d2f9ea5a63d4f8b2ce60f1408b4fc1e8565b4a18

Reporting entityAMPHENOL CANADA CORP.

Victim entityAMPHENOL CANADA CORP.

Incidentdiscovered Aug 20, 2021

Stated responseTook its systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov