MalwareOtherRansomwarePlayData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowContained

Elmhurst Development LLC

bd_5188c5fc5fadaa11 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 15, 2024

Filed

Sep 5, 2024

To disclose

16 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Elmhurst Development LLC →

Elmhurst Development LLC experienced a Play ransomware attack on or around May 15, 2024, affecting its network and IT systems. The encryption event prevented immediate scope determination until late July 2024. Investigation revealed that personal information of one New Hampshire resident may have been accessed. The company notified the FBI, engaged cybersecurity specialists, and is offering credit monitoring through HaystackID.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 113 days

May 15, 2024

Begins

May 15, 2024

Discovered

Sep 5, 2024

Filed

vs. sector median

+8 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_16cb2f682a7c601e2024-09-05Verified
Maine State AGbd_1d1ccd1b2c8c54872024-09-05Candidate
Indiana State AGbd_5decf10630b477392024-09-05Verified
Massachusetts State AGbd_be65f67ae559b2962024-09-06 · +1dVerified

Name: Elmhurst Development LLC
norm: elmhurst development

Name: Elmhurst Development LLC
norm: elmhurst development
Industry: Otherllm

Discovered: May 15, 2024
Breach occurred: May 15, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 5, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took protective actions to stop any unauthorized access
Notified U.S. federal law enforcement
Launched an investigation with the assistance of leading cybersecurity specialists
Notified the Federal Bureau of Investigation (FBI)
Installed monitoring devices to detect any suspicious activity
Changes made: Working to implement additional safeguards
Providing complimentary credit protection and monitoring services through HaystackID
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGSep 5 · first

Maine State AGSep 5 · first

Indiana State AGSep 5 · first

New Hampshire State AGSep 5 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/elmhust-development-20240905.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 5, 2024
Raw hash: 3e1d326bb1591b44249863243f648f9ca80fb3c1be3088e56771a6a07fcd6b83

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityElmhurst Development LLC

Victim entityElmhurst Development LLC

Incidentdiscovered May 15, 2024

Stated responseTook protective actions to stop any unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov