MalwareTechnologyRetail & ConsumerInformationRansomwareCapture Stored DataBlack BastaRansom DemandedData ExfiltratedTargetedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

Northern Safety Co., Inc.

bd_4554c1b2d784977d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 7, 2024

Filed

Nov 25, 2024

To disclose

24 weeks

Affected

3state residents only

Linked

9 filings

Confidence

65%

Full breach record for Northern Safety Co., Inc. →

Northern Safety Company, Inc. reported a ransomware incident involving the Black Basta group. The company detected unusual activity on June 7, 2024. The incident resulted in the potential exposure of personal information (including SSNs) for approximately 3 New Hampshire residents, who were current or former employees. NSC engaged the FBI and third-party cybersecurity experts, contained the incident, and restored systems. Notices were sent on November 25, 2024, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d24 weeks discovery → filing

Incident timeline

discovery → filing · 24 weeks / 171 days

Jun 7, 2024

Discovered

Nov 25, 2024

Filed

vs. sector median

+6 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by black_basta about this victim predates this filing by 171 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (5)

Leak Siteapt73bd_446fc50a676defe12024-10-23 · +33dVerified by operator
Leak Siteblack_bastabd_7f7fdbc4708e1f282024-09-16 · +70dVerified by operator
Leak Siteapt73bd_a4cfc3b86cbf9cbb2024-09-16 · +70dVerified by operator
Leak Siteblack_bastabd_463fd1ff90d9bbaa2024-06-07 · +171dVerified by operator
Leak Siteblack_bastabd_d64ffde355d6a1612024-06-07 · +171dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_b6d333e09c5b23632024-11-25Verified by operator
Indiana State AGbd_fa34a090de0763b72024-11-25Candidate
New Hampshire State AGBlack Bastabd_8157633aaf3302d12024-12-02 · +7dVerified

Name: Northern Safety Co., Inc.
norm: northern safety
Domain: northernsafety.com

Name: Northern Safety Co., Inc.
norm: northern safety
Domain: northernsafety.com
Industry: TechnologyllmRetail & Consumerllm

Discovered: Jun 7, 2024
Materiality determined: —
Notification sent: Nov 25, 2024
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware· Black Basta
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: Black BastaExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation (FBI)Cooperated with the FBI over the course of several months

During the incident: Notified the Federal Bureau of Investigation (FBI)
Engaged third-party cybersecurity experts to assist with analysis and containment measures
Cooperated with the FBI over the course of several months
Identified the root cause of the incident
Restored NSC systems to normal business operations
Undertook an extensive analysis of the impacted data
Sent notices to impacted residents via USPS First Class Mail
Provided complimentary credit monitoring services through Experian
Changes made: Reviewed and enhanced system security
Reviewed and enhanced administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(171 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 25 · first

Indiana State AGNov 25 · first

New Hampshire State AGNov 25 · first · this page

New Hampshire State AG+7d

Pattern: first filing Nov 25 (MA), last Dec 2 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/northern-safety-company-20241125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 25, 2024
Raw hash: a3ef076b6918da2a6b2ab1655e78e6ecc3654ffafe2499e4d466bb7ba81a9723

Linked disclosures

Ransomware claims (5)

Regulatory filings (3) · sorted by filing gap

Reporting entityNorthern Safety Co., Inc.

Victim entityNorthern Safety Co., Inc.

Incidentdiscovered Jun 7, 2024

Stated responseNotified the Federal Bureau of Investigation (FBI)

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov