MalwareOtherRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Symbia Logistics

bd_51320e35def43d5e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 6, 2021

Filed

Oct 31, 2022

To disclose

16 months

Affected

3state residents only

Linked

4 filings

Confidence

66%

Full breach record for Symbia Logistics →

Symbia Logistics notified the NH AG of a ransomware incident discovered July 6, 2021. Unauthorized access and potential data exfiltration occurred on Nov 1, 2021. 3 NH residents affected. Data types: name, address, SSN, driver's license. Remediation included XDR, MFA, and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 1, 2021

Begins

Oct 31, 2022

Filed

vs. sector median

+61 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_9d9021bee2a66cdd2022-10-25 · +6dCandidate
California State AGbd_a7c62f469e044a322022-10-25 · +6dVerified
Massachusetts State AGbd_f7cac5c278067b152022-10-25 · +6dVerified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Symbia Logistics
norm: symbia logistics
Industry: Otherllm

Discovered: Jul 6, 2021
Breach occurred: Nov 1, 2021
Materiality determined: —
Notification sent: Oct 25, 2022
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Engaged a data mining firm to review systems
Informed law firm
Identified potentially affected individuals
Mailed notification letters to affected individuals
Changes made: Deploying enterprise leaders in XDR solutions
Installing multi-factor authentication
MDM and endpoint security solutions to secure and manage mobile devices
Completed a third party security audit
Holding weekly meetings to review security logs
Implemented a secure password manager that requires multi-factor authentication
Added a third party security company to provide fully-managed protection, monitoring and response services including a 24/7 Security Operations Center
Continued onsite, offsite and cloud-based backup solutions
Offered twelve (12) months of complimentary credit monitoring and identity theft restoration services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 months(482 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGOct 25 · first

California State AGOct 25 · first

Massachusetts State AGOct 25 · first

New Hampshire State AG+6d · this page

Pattern: first filing Oct 25 (MT), last Oct 31 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/symbia-logistics-20221031.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 31, 2022
Raw hash: 0e7b01f21b7dbadee79c3ab93569ac3fcb64e6028be4d52433d8dbbb581ae9f7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entitySymbia Logistics

Incidentdiscovered Jul 6, 2021

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov