Social EngineeringTechnologyInformationPhishingCustomer Data InvolvedData ExfiltratedFinancial accountLowContained

ANSYS, INC.

bd_5e5de8b90268dba4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 6, 2019

Filed

Jul 30, 2019

To disclose

8 weeks

Affected

15state residents only

Linked

2 filings

Confidence

66%

Full breach record for ANSYS, INC. →

ANSYS, Inc. notified the New Hampshire Attorney General of a data event affecting 15 state residents. Unauthorized access to an employee email account occurred between May 15 and May 20, 2019. The breach involved financial information, specifically bank account and routing numbers. ANSYS engaged forensic investigators, reset credentials, and mailed notices to affected individuals on July 26, 2019.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 22 days

discovery → filing · 8 weeks / 54 days

May 15, 2019

Begins

Jun 6, 2019

Discovered

Jul 30, 2019

Filed

vs. sector median

11 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_44462ab21df671062019-07-26 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: ANSYS, INC.
norm: ansys
Domain: ansys.com
Industry: Technologyllm

Discovered: Jun 6, 2019
Breach occurred: May 15, 2019 – May 20, 2019
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 26, 2019
Affected individuals: 15state-resident count only
Data types: Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: phishing_link

During the incident: Worked with a third-party forensic investigator
Changed the employee's email credentials
Began mailing written notice of this incident to the individuals whose personal information may have been accessible
Changes made: Reviewing existing security measures and policies and procedures to further enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 26 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ansys-20190730.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2019
Raw hash: dbbd86af980fa824c0e40937ef6533d387f24720908539caac3f9028e680d9ef

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityANSYS, INC.

Incidentdiscovered Jun 6, 2019

Stated responseWorked with a third-party forensic investigator

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov