MalwareRansomwareData ExfiltratedData PublishedRansom DemandedPIIIDENTITY_BASICLowContained
Brodart Co.
bd_51f4dfb72f3084e5 · schema v1 · pii pii-v1
Full breach record for Brodart Co. →Brodart Co. notified New Hampshire residents of a ransomware attack on its IT systems starting October 14, 2023. Unauthorized third parties encrypted data and exfiltrated employee personal information, which was subsequently published on the internet. Brodart engaged cybersecurity experts and law enforcement, and offered one year of credit monitoring via Experian IdentityWorks to affected employees.
Leak gap clock⏱ Leak >30d6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 4 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 40 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0db09dbbe70ddbddMaine State AGfiled 2023-11-22Candidate
- bd_b7facf5b57ed5e59California State AGfiled 2023-11-22Verified
- bd_c461cba2b607776bMontana State AGfiled 2023-11-22Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/brodart-20231122.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 22, 2023
- Raw hash
- 948f297bb144b6ff3eac42ccc1850c997d26c351ba34bf222f7b823f74d5be9f
Reporting entity
- Name
- Brodart Co.norm: brodart
- Domain
- brodart.com
Victim entity
- Name
- Brodart Co.norm: brodart
- Domain
- brodart.com
Incident
- Discovered
- Oct 14, 2023
- Materiality determined
- —
- Notification sent
- Nov 22, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.