HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
The Cannon Corporation
bd_6075ef2eac55c60a · schema v1 · pii pii-v1
Full breach record for The Cannon Corporation →Cannon Design Corporation reported unauthorized access to its network between January 19-25, 2023, discovered on January 25, 2023. The incident affected 21 New Hampshire residents, exposing basic identity information (name, address). The company notified federal law enforcement, offered credit monitoring via Experian, and implemented additional employee safeguards and training.
Leak gap clock✗ Leak >180d19 months discovery → filing
This filing is one of 5 about the same incident.View merged incident
A leak claim by avoslocker about this victim predates this filing by 555 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_254fc6798c6e3f3aMontana State AGfiled 2024-08-19Candidate
- bd_47c8afecbf0e0a57Vermont State AGfiled 2024-08-19Verified
- bd_ce1fa2f5343ac702California State AGfiled 2024-08-19Verified
- bd_5e25aa73e9170528New Hampshire State AGfiled 2024-09-16(28d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cannon-design-20240819.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 19, 2024
- Raw hash
- 74f0b7c72d97e84582f310c03b8220284f346693eda425d6a96c717aec344814
Reporting entity
- Name
- The Cannon Corporationnorm: the cannon
- Domain
- cannondesign.com
Victim entity
- Name
- The Cannon Corporationnorm: the cannon
- Domain
- cannondesign.com
Incident
- Discovered
- Jan 25, 2023
- Materiality determined
- May 3, 2024
- Notification sent
- Aug 19, 2024
- Affected individuals
- 21
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement regarding the event
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 months(572 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.