MalwareHospitalityHospitalityRansomwareRansom DemandedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Broken Sound Club, Inc.

bd_4fd27afaf0cd0201 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 26, 2021

Filed

Jul 16, 2021

To disclose

16 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Broken Sound Club, Inc. →2 incidents on file

Broken Sound Club, Inc. experienced a ransomware attack on March 26, 2021, where an unauthorized third party attempted to lock out the network in exchange for payment. The incident potentially exposed the names, mailing addresses, and Social Security numbers of two New Hampshire residents (members and vendors). The company contained the incident by shutting off network access, engaged forensic investigators, and is offering 12 months of credit monitoring through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 112 days

Mar 26, 2021

Begins

Mar 26, 2021

Discovered

Jul 16, 2021

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_1e604204c4d0231e2021-07-16Candidate

Name: Broken Sound Club, Inc.
norm: broken sound club
Domain: wilsonelser.com

Name: Broken Sound Club, Inc.
norm: broken sound club
Industry: Hospitalityllm

Discovered: Mar 26, 2021
Breach occurred: Mar 26, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 16, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Immediately shut off all access to the network
Engaged a specialized third-party forensic incident response firm to assist with securing the environment
Working with law enforcement to respond to this incident
Offering 12 months of credit monitoring, fraud consultation, and identity theft restoration through Kroll
Changes made: Reviewed and altered policies and procedures relating to the security of systems and servers
Reviewed and altered information life cycle management
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(112 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGJul 16 · first

New Hampshire State AGJul 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/broken-sound-20210716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2021
Raw hash: ed460c08636e5b1766078bb407e53b4ad24ba87fe9f87366a6e79c81b5e3e3db

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBroken Sound Club, Inc.

Victim entityBroken Sound Club, Inc.

Incidentdiscovered Mar 26, 2021

Stated responseImmediately shut off all access to the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov