MalwareProfessional ServicesRansomwareData EncryptedRansom DemandedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Gardner Resources Consulting LLC

bd_544f8dd24d1c0efb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 3, 2021

Filed

Aug 1, 2022

To disclose

47 weeks

Affected

270state residents only

Linked

4 filings

Confidence

66%

Full breach record for Gardner Resources Consulting LLC →

Gardner Resources Consulting, LLC reported a ransomware attack on September 3, 2021, affecting 270 New Hampshire residents. The incident involved unauthorized access to systems, potentially exposing SSNs, driver's license numbers, and financial account information. GRC secured systems, engaged forensic experts, and provided 12 months of credit monitoring. The ransom was not paid.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 47 weeks / 332 days

Sep 3, 2021

Begins

Sep 3, 2021

Discovered

Aug 1, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_c41945a7367529e22022-07-29 · +3dCandidate
Indiana State AGbd_d2ecf958649ed76a2022-07-29 · +3dVerified
Massachusetts State AGbd_ec41be20ef30c2c12022-07-29 · +3dVerified

Name: Gardner Resources Consulting LLC
norm: gardner resources consulting

Name: Gardner Resources Consulting LLC
norm: gardner resources consulting

Discovered: Sep 3, 2021
Breach occurred: Sep 3, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 29, 2022
Affected individuals: 270state-resident count only
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General

During the incident: Took steps to secure the systems
Began an investigation to determine the nature and scope of the incident with the assistance of cybersecurity experts
Engaged legal counsel to assist with its investigation and response
Worked with a cybersecurity expert to perform a forensic investigation
Cybersecurity expert performed a full risk assessment of GRC’s system
Established a call center through Epiq to address questions or concerns
Offered credit monitoring for 12 months through TransUnion
Changes made: Conducted further training of employees
Retained information security experts to review its technology protections
Actively monitor its systems for unusual activity
Implemented additional measures to further protect our systems, including conducting further training of employees to identify potentially malicious emails
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 47 weeks(332 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGJul 29 · first

Indiana State AGJul 29 · first

Massachusetts State AGJul 29 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gardner-resources-consulting-20220801.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2022
Raw hash: 597047ecb3a11231aaed38bc0d5950d0e8cc8d31dd5e16158355d3babe6114d6

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityGardner Resources Consulting LLC

Victim entityGardner Resources Consulting LLC

Incidentdiscovered Sep 3, 2021

Stated responseTook steps to secure the systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov