HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Jonti-Craft, Inc.

bd_6a8e902e8976b714 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 18, 2024

Filed

Mar 5, 2025

To disclose

20 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Jonti-Craft, Inc. →

Jonti-Craft, Inc. notified the New Hampshire Attorney General of a data security incident discovered on October 18, 2024, where unauthorized access occurred via an account. One New Hampshire resident's personal information was potentially involved. Jonti-Craft engaged cybersecurity specialists, enhanced network security, and offered credit monitoring services to the affected individual.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d20 weeks discovery → filing

Incident timeline

discovery → filing · 20 weeks / 138 days

Oct 18, 2024

Discovered

Feb 27, 2025

Scope determined

Mar 5, 2025

Filed

vs. sector median

+9 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by black_basta about this victim predates this filing by 138 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_f571dcd5461c6e082024-10-18 · +138dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_29042fdc0139c6622025-03-05Verified by operator
Montana State AGbd_ece65415d4bec4362025-03-05Candidate
Massachusetts State AGbd_f14a8b52e31b9d862025-03-06 · +1dVerified by operator

Name: Jonti-Craft, Inc.
norm: jonti craft
Domain: jonti-craft.com

Name: Jonti-Craft, Inc.
norm: jonti craft
Domain: jonti-craft.com
Industry: Manufacturingllm

Discovered: Oct 18, 2024
Materiality determined: Feb 27, 2025
Notification sent: Mar 5, 2025
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Initiated an investigation of the matter
Engaged cybersecurity specialists to conduct an investigation
Worked to determine whose information was potentially involved in the incident
Reconciled this information with internal records to verify information
Provided you with access to <<Membership Offering Length>> months of credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy, and fully managed identity theft recovery services through IDX
Changes made: Implemented additional measures to enhance the security of our network environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(138 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMar 5 · first

Montana State AGMar 5 · first

New Hampshire State AGMar 5 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jonti-craft-20250305.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 5, 2025
Raw hash: e2d3cefed2468c5b16013c8aa5e7e95cda081b650031a1549742d4f35d3c86b3

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityJonti-Craft, Inc.

Victim entityJonti-Craft, Inc.

Incidentdiscovered Oct 18, 2024

Stated responseInitiated an investigation of the matter

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov