MalwareGovernmentGovernmentRansomwareStolen CredentialsData EncryptedCustomer Data InvolvedMulti-Stage ChainIdentity (basic)Government IDMediumContained

Borough of Wildwood Crest

bd_5aecea5c04a8a070 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 27, 2020

Filed

Jul 6, 2020

To disclose

6 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Borough of Wildwood Crest →

Borough of Wildwood Crest notified NH AG of a data event affecting 2 NH residents. Malware allowed an intruder to access systems, encrypt files, and collect PII (name, DOB, driver's license). Occurred Nov 2019-Apr 2020. Discovered May 2020. Notices sent June 2020. Response included credential resets, RDP disabled, forensic investigation, and credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 191 days

discovery → filing · 6 weeks / 40 days

Nov 18, 2019

Begins

May 27, 2020

Discovered

Jul 6, 2020

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_aa12e61f21009aaa2020-07-01 · +5dVerified

Name: Borough of Wildwood Crest
norm: borough of wildwood crest

Name: Borough of Wildwood Crest
norm: borough of wildwood crest
Industry: Governmentllm

Discovered: May 27, 2020
Breach occurred: Nov 18, 2019 – Apr 14, 2020
Undetected for: 191 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 29, 2020
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Engaged third-party computer specialists
Changed user credentials
Disabled RDP access to the Wildwood Crest systems
Notified cyber insurer
Launched investigation with expert third-party forensic investigators
Changes made: Reviewing existing policies and procedures
Reassessing existing technical and administrative safeguards
Implementing new and additional safeguards
Offering complimentary credit monitoring service for twelve (12) months through Epiq
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 1 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jul 1 (MA), last Jul 6 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/borough-wildwood-crest-20200706.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2020
Raw hash: 5057b904b2ee5629fe53820decee473c87981966221e1cf935042b1d0ba97b5b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBorough of Wildwood Crest

Victim entityBorough of Wildwood Crest

Incidentdiscovered May 27, 2020

Stated responseEngaged third-party computer specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov