MalwareManufacturingManufacturingRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Prescott Metal, Inc.

bd_48756cc8f8cce970 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 14, 2018

Filed

Nov 5, 2018

To disclose

7 weeks

Affected

3state residents only

Confidence

66%

Full breach record for Prescott Metal, Inc. →

Prescott Metal, Inc. experienced a ransomware attack on September 14, 2018, which encrypted files and potentially exposed personal information of approximately three New Hampshire residents. The affected data may include names, addresses, Social Security numbers, and bank account information. The company engaged experts, reset credentials, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 52 days

Sep 14, 2018

Begins

Sep 14, 2018

Discovered

Nov 5, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Prescott Metal, Inc.
norm: prescott metal

Name: Prescott Metal, Inc.
norm: prescott metal
Industry: Manufacturingllm

Discovered: Sep 14, 2018
Breach occurred: Sep 14, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 29, 2018
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Contacted their IT department
Engaged computer experts to investigate
Sent notification letters to potentially impacted individuals
Offered 12 months of credit monitoring and identity theft protection services
Changes made: Reviewing their information security policies and procedures
Resetting employees' access credentials
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/prescott-metal-20181105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2018
Raw hash: 0c0174f6c7fc880f19053c5a2a302c32903089c7c297e1247e313f8c5a39ce2d

Reporting entityPrescott Metal, Inc.

Victim entityPrescott Metal, Inc.

Incidentdiscovered Sep 14, 2018

Stated responseContacted their IT department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov