Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

WOODBOLT DISTRIBUTION, LLC

bd_4e14ce1d0dbfacdc · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 11, 2022

Filed

Jan 26, 2023

To disclose

37 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for WOODBOLT DISTRIBUTION, LLC →

Nutrabolt reported a data security incident to the New Hampshire Attorney General on January 26, 2023. On May 11, 2022, the company identified unauthorized network access after an employee downloaded a malicious file. The incident compromised personal information, including names, Social Security numbers, and dates of birth, of one New Hampshire resident. Nutrabolt engaged forensic investigators, enhanced security measures, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 37 weeks / 260 days

May 11, 2022

Discovered

Jan 26, 2023

Filed

vs. sector median

+28 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_8ecf4a75f17580d02023-01-26Verified
Massachusetts State AGbd_9c2b5787f3f20ee62023-01-31 · +5dVerified

Name: WOODBOLT DISTRIBUTION, LLC
norm: woodbolt distribution

Name: WOODBOLT DISTRIBUTION, LLC
norm: woodbolt distribution
Also named: Woodbolt Distribution, LLCdba oflegal entity
Nutraboltdba oftrade name
Industry: Retail & Consumerllm

Discovered: May 11, 2022
Materiality determined: —
Notification sent: Jan 26, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged a leading cybersecurity firm to conduct a forensic investigation
Engaged a firm, under the direction of counsel, to manually review various files and directories
Engaging with law enforcement
Offering complimentary credit monitoring and identity theft protection
Changes made: Enhancing its technical security measures
Conducting employee training
Updated its internal data security policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(260 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJan 26 · first

New Hampshire State AGJan 26 · first · this page

Massachusetts State AG+5d

Pattern: first filing Jan 26 (IN), last Jan 31 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/woodbolt-distribution-dba-nutrabolt-20230126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 26, 2023
Raw hash: a16bbb092f34ede2682050ca58a2ebc7c3615a558385158a0e8a9556d33bc538

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWOODBOLT DISTRIBUTION, LLC

Victim entityWOODBOLT DISTRIBUTION, LLC

Incidentdiscovered May 11, 2022

Stated responseEngaged a leading cybersecurity firm to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov