MalwareRansomwareCapture Stored DataRansom DemandedData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Outsourcing Center
bd_68ececae1b10f25d · schema v1 · pii pii-v1
Full breach record for Outsourcing Center →Convergent Outsourcing, Inc. notified New Hampshire AG of a ransomware incident on June 17, 2022. An external actor gained unauthorized access, deployed ransomware, and encrypted a file share. The actor likely attempted to exfiltrate data. Personal information potentially involved included names, contact info, financial account numbers, and SSNs. 2,045 NH residents were notified on Oct 26, 2022, offered 12 months of credit monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_408daf283b4aa0d6California State AGfiled 2022-11-01Candidate
- bd_7dfa3edfec606122Maine State AGfiled 2022-11-01Verified
- bd_fd02da83dfcf0822Delaware State AGfiled 2022-10-26(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/convergent-outsourcing-20221101.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 1, 2022
- Raw hash
- 24c7c789cfa5d76cefaaaa718eedfbb7d4dcadb8c4086223049d9472ac594004
Reporting entity
- Name
- Outsourcing Centernorm: outsourcing center
- Domain
- outsourcing-center.com
Victim entity
- Name
- Outsourcing Centernorm: outsourcing center
- Domain
- outsourcing-center.com
Incident
- Discovered
- Jun 17, 2022
- Materiality determined
- —
- Notification sent
- Oct 26, 2022
- Affected individuals
- 2,045
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Submitted written notification of a data breach to the Office of the Attorney General, Consumer Protection Bureau
Compliance
- Time to disclose
- 20 weeks(137 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.