MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
C.E. Niehoff & Company
bd_6a8aff16ee7dbab5 · schema v1 · pii pii-v1
Full breach record for C.E. Niehoff & Company →C.E. Niehoff & Co. reported a ransomware incident affecting 1,509 individuals, including 1 Maine resident. The breach occurred between September 9 and 12, 2021, compromising names and Social Security Numbers. The company notified affected individuals in writing on December 23, 2021, and provided 12 months of credit monitoring through Experian.
Maine clockDiscovered Sep 12, 2021 → Filed with AG Dec 23, 2021102d ✗ ME AG >90d15 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_20f054c7e041c61eHHS OCRfiled 2021-12-23Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bd310646-5018-4bf0-aae5-9f9431b0044a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2021
- Raw hash
- e9495a655a5eeaa2f6c01434e67d2282600356f5e2e63083a01b33411a229a18
Reporting entity
- Name
- C.E. Niehoff & Companynorm: ce niehoff
Victim entity
- Name
- C.E. Niehoff & Companynorm: ce niehoff
Incident
- Discovered
- Sep 12, 2021
- Materiality determined
- —
- Notification sent
- Dec 23, 2021
- Affected individuals
- 1,509
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 15 weeks(102 days from discovery to filing)
- Compliance flags
- ME AG >90d · 102dME resident >60d · 102d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Sep 12, 2021→ Filed with AG: Dec 23, 2021102d 90 days ME AG >90d Maine Discovered: Sep 12, 2021→ Notified: Dec 23, 2021102d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.