MalwareRansomwareStolen CredentialsData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICEMPLOYMENTLowContained
Bath Fitter Distributing Inc.
bd_470885952a8d2980 · schema v1 · pii pii-v1
Full breach record for Bath Fitter Distributing Inc. →Bath Fitter Distributing Inc. reported a ransomware attack occurring Dec 4-5, 2024. An external actor impersonated IT support to gain network access, encrypt files, and potentially exfiltrate data. The incident was discovered on Dec 5, 2024. Personal information of 49 New Hampshire current and former employees was impacted. The company isolated the network, disabled remote access, built a new network, and offered credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_25a4eb9673b87885Indiana State AGfiled 2025-04-18(3d gap)Verified
- bd_fb709bb811158e6eMaine State AGfiled 2025-04-22(7d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bath-fitter-distributing-20250415.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 15, 2025
- Raw hash
- 83e75973dc2817b3a4483ea4bee9b3c72c849abac57c13b1805b9c9b6c61277b
Reporting entity
- Name
- Bath Fitter Distributing Inc.norm: bath fitter distributing
Victim entity
- Name
- Bath Fitter Distributing Inc.norm: bath fitter distributing
Incident
- Discovered
- Dec 5, 2024
- Materiality determined
- Mar 7, 2025
- Notification sent
- Apr 17, 2025
- Affected individuals
- 49
- Data types
- PIIIDENTITY_BASICEMPLOYMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed Notice of Security Incident with New Hampshire Consumer Protection & Antitrust Bureau
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 weeks(131 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.