MalwareTechnologyInformationRansomwareData ExfiltratedData EncryptedGovernment IDPIIMediumContained

AVANT TECHNOLOGY, INC.

bd_5ffdbb681057f57a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 1, 2020

Filed

Aug 24, 2020

To disclose

21 weeks

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for AVANT TECHNOLOGY, INC. →

Avant Technology notified the NH AG of a ransomware incident in April 2020. Unauthorized access occurred April 20-27, 2020. Malware encrypted systems. SSNs of 2 NH residents were potentially accessed. Notification sent August 19, 2020. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 20, 2020

Begins

Aug 24, 2020

Filed

vs. sector median

+2 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_2ad013a1a7a425f12020-08-19 · +5dVerified
Indiana State AGbd_cf0d16dcecd0e0f62020-08-19 · +5dVerified

Name: AVANT TECHNOLOGY, INC.
norm: avant technology

Name: AVANT TECHNOLOGY, INC.
norm: avant technology
Industry: Technologyllm

Discovered: Apr 1, 2020
Breach occurred: Apr 20, 2020 – Apr 27, 2020
Materiality determined: —
Notification sent: Aug 19, 2020
Affected individuals: 2state-resident count only
Data types: Government IDPII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Worked with third-party forensic computer specialists
Resetting account passwords
Implementing additional security measures to detect unauthorized activity
Providing notice of this incident and guidance on how to better protect against identity theft and fraud
Offering potentially affected individuals access to credit monitoring and identity theft protection service for 12 months at no cost
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(145 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGAug 19 · first

Indiana State AGAug 19 · first

New Hampshire State AG+5d · this page

Pattern: first filing Aug 19 (MA), last Aug 24 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/avant-technology-20200824.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 24, 2020
Raw hash: 0760d532c426e412446430a734121eac63f44a77522f660f2761ec0358454eb1

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityAVANT TECHNOLOGY, INC.

Victim entityAVANT TECHNOLOGY, INC.

Incidentdiscovered Apr 1, 2020

Stated responseWorked with third-party forensic computer specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov