MalwareTechnologyInformationRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountPHIHealth (basic)MediumContained

Marlabs, Inc.

bd_42d6976b7f6f59eb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 20, 2021

Filed

Jan 10, 2022

To disclose

29 weeks

Affected

16state residents only

Linked

6 filings

Confidence

67%

Full breach record for Marlabs, Inc. →

Marlabs, Inc. experienced a ransomware incident on or about June 20, 2021, resulting in the potential unauthorized exposure of personal information for 16 New Hampshire residents. Affected data may include names, addresses, SSNs, financial account info, passport numbers, and health insurance information. The company engaged forensic investigators, notified law enforcement, and implemented MFA and password resets. Credit monitoring was offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 weeks / 204 days

Jun 20, 2021

Discovered

Jan 10, 2022

Filed

vs. sector median

+10 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_3107df25a626669e2022-01-05 · +5dCandidate
Maine State AGbd_59e7f71978215ca02022-01-05 · +5dVerified by operator
Massachusetts State AGbd_9c0a8dcdc100cd8d2022-01-05 · +5dVerified
Indiana State AGbd_a924f88032fe8e402022-01-05 · +5dVerified

Show 1 more filing ↓up to 5d gap

California State AGbd_f9875622f50ce95b2022-01-05 · +5dVerified

Name: Marlabs, Inc.
norm: marlabs

Name: Marlabs, Inc.
norm: marlabs
Industry: Technologyllm

Discovered: Jun 20, 2021
Materiality determined: —
Notification sent: Jan 5, 2022
Affected individuals: 16state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, New Hampshire

During the incident: Worked with cybersecurity counsel and a cyber forensic specialist to investigate how the Incident occurred and what information was compromised
Notified law enforcement
Engaged with federal law enforcement to assist in the investigation
Changes made: Changing of all passwords within its environment
Implementing multi-factor authentication for all its users
Improving its network security
Offered complimentary identity theft and credit monitoring services for twelve (12) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(204 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Montana State AGJan 5 · first

Maine State AGJan 5 · first

Massachusetts State AGJan 5 · first

Indiana State AGJan 5 · first

California State AGJan 5 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jan 5 (MT), last Jan 10 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/marlabs-20220110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 10, 2022
Raw hash: da1386ca9af639f801b9ed473aff0ea00dd954ce7abc3edbed4c8c2256e39401

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMarlabs, Inc.

Victim entityMarlabs, Inc.

Incidentdiscovered Jun 20, 2021

Stated responseWorked with cybersecurity counsel and a cyber forensic specialist to investigate how the Incident occurred and what information was compromised

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov