MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
DAVACO
bd_5ae29a746abaf7a0 · schema v1 · pii pii-v1
Full breach record for DAVACO →Davaco LP notified the New Hampshire Attorney General of a ransomware attack discovered on June 11, 2021. An unauthorized individual gained access to the network, encrypted data, and exfiltrated employee PII including names, SSNs, and driver's licenses. 20 NH residents were affected. Notifications were mailed July 2, 2021. Remediation included MFA, email upgrades, and endpoint protection. Affected individuals received credit monitoring via IDX.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_60b3867f0b16a8faMaine State AGfiled 2021-07-19(3d gap)Verified
- bd_6400a333d4483ff5California State AGfiled 2021-07-19(3d gap)Verified
- bd_cfb65246deff18d4South Carolina State AGfiled 2021-07-19(3d gap)Verified
- bd_611f04b0c24d36c8Montana State AGfiled 2021-07-02(14d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/davaco-20210716.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2021
- Raw hash
- 21caa0738c24ae39b0f5692a1ea21c54a979149ee88321770d2b05d9058e81bd
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- DAVACOnorm: davaco
- Domain
- davaco.com
Incident
- Discovered
- Jun 11, 2021
- Materiality determined
- —
- Notification sent
- Jul 2, 2021
- Affected individuals
- 20
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.