HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
Olson & Co Steel
bd_53aee42e94408666 · schema v1 · pii pii-v1
Full breach record for Olson & Co Steel →Olson & Co Steel notified the NH AG of a data security incident occurring on April 10, 2024, involving unauthorized network access by an unknown actor. The incident affected personal information of 1 New Hampshire employee. The company engaged forensic experts, contained the breach, and offered credit monitoring services.
Leak gap clock⏱ Leak >30d12 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by black_basta about this victim predates this filing by 57 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_04e551dd449abdd4Leak Siteblack_bastafiled 2024-05-07(57d gap)Candidate
Regulatory filings (1) · sorted by filing gap
- bd_ecb185b9a9ba31fcCalifornia State AGfiled 2024-07-03Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/olson-steel-20240703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 3, 2024
- Raw hash
- 84a40304696da3a24bf5c63f6dbfed47cf6af121279e955b61dd21d4bde85f93
Reporting entity
- Name
- Olson & Co Steelnorm: olson co steel
- Domain
- olsonsteel.com
Victim entity
- Name
- Olson & Co Steelnorm: olson co steel
- Domain
- olsonsteel.com
Incident
- Discovered
- Apr 10, 2024
- Materiality determined
- Jun 14, 2024
- Notification sent
- Jul 3, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(84 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.