MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Security Alliance LLC

bd_3cb5856feb7065ed · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 16, 2022

Filed

Dec 27, 2022

To disclose

15 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Security Alliance LLC →

Security Alliance, LLC reported a ransomware incident discovered on September 16, 2022, where computer systems were encrypted and unauthorized access occurred. The breach impacted the names and Social Security numbers of current and former employees, including 2 New Hampshire residents. Notifications were sent on December 27, 2022, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d15 weeks discovery → filing

Incident timeline

discovery → filing · 15 weeks / 102 days

Sep 16, 2022

Discovered

Dec 7, 2022

Scope determined

Dec 27, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 79 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_8c020a1eb17ae42d2022-10-09 · +79dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_24cf16e3d084b1da2022-12-27Verified
Massachusetts State AGbd_2fb14ae0c46db5802022-12-28 · +1dVerified

Name: Security Alliance LLC
norm: security alliance
Domain: securityalliancegroup.com

Name: Security Alliance LLC
norm: security alliance
Domain: securityalliancegroup.com
Industry: Professional Servicesllm

Discovered: Sep 16, 2022
Materiality determined: Dec 7, 2022
Notification sent: Dec 27, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella

During the incident: Launched an investigation
Retained computer forensic experts to assist with determining what happened
Conducted an extensive review of the potentially impacted files
Took steps to provide notification to those individuals
Engaged a leading digital forensics and cybersecurity firm to determine what happened
Offering the potentially affected individuals credit and identity monitoring at no cost through IDX
Changes made: Working with leading cybersecurity experts to enhance the security of its network
Implemented enhanced safeguards to minimize the chance that an incident like this could occur in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(102 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGDec 27 · first

New Hampshire State AGDec 27 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/security-alliance-20221227.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 27, 2022
Raw hash: 6c23b2f5fddce8fe96a9a146b32b9c10c9a70d8153e062113c6daca18a8c84a9

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entitySecurity Alliance LLC

Victim entitySecurity Alliance LLC

Incidentdiscovered Sep 16, 2022

Stated responseLaunched an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov