HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDMediumResolved

Nautic Partners

bd_3dd850ae1490896c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 12, 2024

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

78%

Full breach record for Nautic Partners →

Nautic Partners, LLC discovered unauthorized access to its network between February 23, 2023 and April 5, 2023. A comprehensive forensic investigation concluded December 29, 2023, confirming that personal information including full names and Social Security numbers may have been accessed or removed. Approximately 97 Rhode Island residents were identified as impacted. The company notified affected individuals and offered complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Feb 23, 2023

Begins

Jan 12, 2024

Filed

This filing is one of 7 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 282 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_02d737d56b2a0e5d2023-04-05 · +282dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_4b91af21db69c8692024-01-12Verified by operator
Maine State AGbd_805ce4b6b225ddb72024-01-12Verified
Indiana State AGbd_9794ce4614b04a002024-01-12Verified
New Hampshire State AGbd_3d38a2e7ff75ac2f2024-01-16 · +4dVerified

Show 1 more filing ↓up to 550d gap

Massachusetts State AGbd_e428aa01cda84d622022-07-11 · +550dVerified by operator

Name: Nautic Partners
norm: nautic partners
Domain: nautic.com

Name: Nautic Partners
norm: nautic partners
Domain: nautic.com

Discovered: —
Breach occurred: Feb 23, 2023 – Apr 5, 2023
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1074 Data Staged
Threat actor: External

During the incident: Immediately launched an investigation in consultation with outside cybersecurity professionals who regularly investigate and analyze these types of situations
Conducted a comprehensive investigation and manual review of files that were potentially accessed or removed from our network
Set up a dedicated and confidential toll-free response line staffed with professionals familiar with this incident
Sent notification letters to affected individuals
Changes made: Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Continually evaluate and modify practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Massachusetts State AGJul 11 · first

Massachusetts State AG+550d

Maine State AG+550d

Indiana State AG+550d

California State AG+550d · this page

New Hampshire State AG+554d

Pattern: first filing Jul 11 (MA), last Jan 16 (NH) — a 554-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-579282
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 12, 2024
Raw hash: 485cd4232e4d1a9e27c9a296e5d4a4b6494630b53c25b995d9eb20cfb8eea0ea

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityNautic Partners

Victim entityNautic Partners

IncidentUnauthorized Access

Stated responseImmediately launched an investigation in consultation with outside cybersecurity professionals who regularly investigate and analyze these types of situations

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov