HackingCustomer Data InvolvedPIIIDENTITY_BASICLowActive

cgm

bd_51a69c1950f8dead · schema v1 · pii pii-v1

CGM, Inc. notified the New Hampshire Attorney General of a data event affecting 2 NH residents. Unauthorized access occurred between Dec 15-28, 2022. CGM engaged third-party specialists, notified federal law enforcement, and offered 1-year credit monitoring. Investigation was ongoing at time of filing.

Leak gap clock✗ Leak >180d24 weeks discovery → filing

This filing is one of 4 about the same incident.View merged incident

A leak claim by lockbit2 about this victim predates this filing by 470 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

bd_2735fea22890668dWashington State AGfiled 2023-06-07(5d gap)Verified
bd_a22f66366c758289Vermont State AGfiled 2023-06-07(5d gap)Verified
bd_acd5ed6139e7a5a2California State AGfiled 2023-06-07(5d gap)Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cgm-20230612.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2023
Raw hash: 361924768b43edbf8bb61afb636f8a77761654fc0bb4e4d908a388bf555fb81c

Reporting entity

Name: cgm

Victim entity

Name: cgm

Incident

Discovered: Dec 28, 2022
Materiality determined: Mar 23, 2023
Notification sent: Jun 7, 2023
Affected individuals: 2
Data types: PIIIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcement regarding the incidentProviding written notice of this incident to relevant state regulators

Compliance

Time to disclose: 24 weeks(166 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.