MalwareManufacturingManufacturingRansomwareData EncryptedRansom DemandedIdentity (basic)Government IDMediumContained

Container Graphics Corporation

bd_5f8f5a8ea20478a8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 24, 2020

Filed

Sep 15, 2020

To disclose

22 days

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Container Graphics Corporation →2 incidents on file

Container Graphics Corporation notified the NH AG of a ransomware incident discovered on Aug 24, 2020. Systems were encrypted. Employee PII (names, addresses, SSNs) was accessed. 1 NH resident notified. Remediation included safeguards, call center, and 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 22 days

Aug 24, 2020

Discovered

Sep 15, 2020

Filed

vs. sector median

8 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_24a9579e43c65d842020-09-14 · +1dVerified
Indiana State AGbd_bc05906d36ace34a2020-09-14 · +1dVerified

Name: Container Graphics Corporation
norm: container graphics

Name: Container Graphics Corporation
norm: container graphics
Industry: Manufacturingllm

Discovered: Aug 24, 2020
Materiality determined: —
Notification sent: Sep 14, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Launched an investigation to determine what happened
Remediate any ongoing issues
Added additional safeguards to minimize the chance that an incident like this could occur in the future
Established a toll-free call center through ID Experts to answer any questions about the incident and address related concerns
Offered twelve (12) months of complimentary credit monitoring and identity remediation services to all potentially impacted individuals
Changes made: Added additional safeguards to minimize the chance that an incident like this could occur in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 14 · first

Indiana State AGSep 14 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/container-graphics-20200915.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2020
Raw hash: a6d1b358ae479736a80b8caa393395b3810440f7a572bd2d5cd5574e810337f5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityContainer Graphics Corporation

Victim entityContainer Graphics Corporation

Incidentdiscovered Aug 24, 2020

Stated responseLaunched an investigation to determine what happened

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov