MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedPIIIdentity (basic)LowContained

Wilder & Co

bd_6330f3869b3cc0e3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 28, 2023

Filed

Aug 23, 2024

To disclose

52 weeks

Affected

3state residents only

Linked

3 records

Confidence

66%

Full breach record for Wilder & Co →

Wilder & Co, CPA notified New Hampshire AG of a ransomware attack discovered on August 28, 2023. The incident potentially exposed PII of 3 New Hampshire residents. Wilder engaged forensic specialists, reported to federal law enforcement, and provided 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d52 weeks discovery → filing

Incident timeline

discovery → filing · 52 weeks / 361 days

Aug 28, 2023

Discovered

Aug 8, 2024

Scope determined

Aug 23, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 3 records about the same incident.View merged incident

A leak claim by alphv about this victim was first seen 358 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_265a9a8a671cc1222023-08-31 · +358dCandidate

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_6fd205dfcd1d56402024-06-07 · +77dVerified

Name: Wilder & Co
norm: wilder
Domain: wildercpa.net

Name: Wilder & Co
norm: wilder
Domain: wildercpa.net
Industry: Professional Servicesllm

Discovered: Aug 28, 2023
Materiality determined: Aug 8, 2024
Notification sent: Aug 22, 2024
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to federal law enforcement

During the incident: Engaged third-party forensic specialists to investigate this matter
Reported this incident to federal law enforcement
Undertook a comprehensive review to identify what information was contained within the potentially impacted files
Began a time consuming, manual review of its internal records in order to locate address information for those potentially impacted
Provided written notice of this incident to the potentially impacted New Hampshire residents
Arranged for complimentary credit monitoring and identity protection services
Changes made: Offered complimentary credit monitoring and identity protection services for 12 months provided by Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 52 weeks(361 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJun 7 · first

New Hampshire State AG+77d · this page

Pattern: first filing Jun 7 (IN), last Aug 23 (NH) — a 77-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wilder-20240823.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2024
Raw hash: 6f6e04b1183ba24f463f63f6dea78ce535ae613acf685335d7600079faaaff4c

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityWilder & Co

Victim entityWilder & Co

Incidentdiscovered Aug 28, 2023

Stated responseEngaged third-party forensic specialists to investigate this matter

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov