MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Walsh Brothers Construction

bd_5b3ab89177987445 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 24, 2021

Filed

Feb 11, 2021

To disclose

18 days

Affected

11state residents only

Linked

3 filings

Confidence

66%

Full breach record for Walsh Brothers Construction →

Walsh Brothers Construction, Inc. notified the NH Attorney General of a ransomware attack discovered on January 24, 2021. The intrusion began around January 20, 2021, involving file encryption and potential exfiltration of employee PII (SSN, driver's license, banking info). Approximately 11 NH residents were affected. The company reset passwords, engaged third-party consultants, notified law enforcement, and offered 24 months of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 18 days

Jan 20, 2021

Begins

Jan 24, 2021

Discovered

Feb 11, 2021

Filed

vs. sector median

8 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_29060ee8df1bf83b2021-02-11Verified
Maine State AGbd_78bdd82a600b27c12021-02-11Candidate

Name: Walsh Brothers Construction
norm: walsh brothers construction

Name: Walsh Brothers Construction
norm: walsh brothers construction
Industry: Manufacturingllm

Discovered: Jan 24, 2021
Breach occurred: Jan 20, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 10, 2021
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Consumer Protection Bureau
Initial access: phishing_link

During the incident: Servers were brought down and all local computers were also disconnected from the Internet
Engagement of third party consultants
Passwords of all employees were immediately reset
Law enforcement was notified
Changes made: Implementing additional protections for its Citrix portal, including access management
Offering identity protection services for 24 months through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 11 · first

Maine State AGFeb 11 · first

New Hampshire State AGFeb 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/walsh-brothers-construction-20210211.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2021
Raw hash: 0074ab00baf798d343a894aa7ec057e0a3fd4f6d222137fc294fad9df731eea3

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityWalsh Brothers Construction

Victim entityWalsh Brothers Construction

Incidentdiscovered Jan 24, 2021

Stated responseServers were brought down and all local computers were also disconnected from the Internet

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov