HackingTechnologyInformationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Constellation Software Inc.

bd_5956b91aa79a4b36 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 28, 2023

Filed

May 25, 2023

To disclose

27 days

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for Constellation Software Inc. →

Constellation Software Inc. reported an unauthorized third-party access to its network between Feb 27 and Apr 3, 2023. The attacker viewed and took files containing personal information. Constellation engaged forensic investigators, notified law enforcement, isolated systems, and offered 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 60 days

discovery → filing · 27 days

Feb 27, 2023

Begins

Apr 28, 2023

Discovered

May 2, 2023

Scope determined

May 25, 2023

Filed

vs. sector median

15 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_b9631555636ec7d92023-05-25Candidate
Massachusetts State AGbd_d5a59a6d31b150b22023-05-25Verified
Vermont State AGbd_b6cc684d4d89fc1a2023-05-12 · +13dVerified
Indiana State AGbd_ea2952588b100c9c2023-05-08 · +17dVerified

Name: Constellation Software Inc.
norm: constellation software

Name: Constellation Software Inc.
norm: constellation software
Industry: Technologyllm

Discovered: Apr 28, 2023
Breach occurred: Feb 27, 2023 – Apr 3, 2023
Undetected for: 60 daysoccurrence → discovery
Materiality determined: May 2, 2023
Notification sent: May 25, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified law enforcement
Initial access: valid_credentials

During the incident: Retained a third-party cybersecurity firm to assist with containment, remediation and to conduct a forensic investigation
Notified law enforcement
Isolating affected systems and securely restoring them from backups
Deploying endpoint detection and response tooling across the environment along with active threat monitoring
Reinforcing network perimeter security
Changes made: Providing 12 months of credit monitoring and identity theft protection through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGMay 8 · first

Vermont State AG+4d

Maine State AG+17d

Massachusetts State AG+17d

New Hampshire State AG+17d · this page

Pattern: first filing May 8 (IN), last May 25 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/constellation-software-20230525.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 25, 2023
Raw hash: 42357589463be2aba488213c5b9372e46b80631cbd776f0dabc74f25d6a1410c

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityConstellation Software Inc.

Victim entityConstellation Software Inc.

Incidentdiscovered Apr 28, 2023

Stated responseRetained a third-party cybersecurity firm to assist with containment, remediation and to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov