MalwareTechnologyHealthcareInformationRansomwareData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountLowContained

NEW ENGLAND BIOLABS, INC.

bd_6b14458f2fbb9077 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 1, 2016

Filed

Feb 25, 2017

To disclose

17 weeks

Affected

746state residents only

Confidence

68%

Full breach record for NEW ENGLAND BIOLABS, INC. →3 incidents on file

New England Biolabs, Inc. notified Washington AG of a breach involving its third-party e-commerce provider, Aptos, Inc. Malware intrusion occurred Feb-Dec 2016; discovered Nov 2016. 746 WA residents affected. Data exposed: names, addresses, phone numbers, payment card numbers/expiry. Aptos engaged cybersecurity firm, removed malware, strengthened access controls, and cooperated with FBI/DOJ.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 249 days

discovery → filing · 17 weeks / 116 days

Feb 26, 2016

Begins

Nov 1, 2016

Discovered

Feb 25, 2017

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed746 affectedView incident

Name: Aptos, Inc.
norm: aptos
Domain: aptos.com

Name: NEW ENGLAND BIOLABS, INC.
norm: new england biolabs
Domain: neb.com
Industry: TechnologyllmHealthcarellm

Discovered: Nov 1, 2016
Breach occurred: Feb 26, 2016 – Dec 5, 2016
Undetected for: 249 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 17, 2017
Affected individuals: 746state-resident count only
Data types: Identity (basic)Financial account
Data elements: Financial account numberName
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 300-399dexposure 200-299d
WA-stated discovery: Found after the fact
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported to the FBI and the U.S. Department of Justice
Third party: via Aptos, Inc.
Initial access: exploit_public_facing

During the incident: Aptos has worked with a leading cybersecurity firm to remove the malware from its systems
Aptos has contacted and offered its cooperation to federal law enforcement
Steps were taken to supply the numbers of affected cards to their issuers for monitoring
Changes made: Strengthening access controls
Actively monitoring the platform to safeguard personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM9674.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2017
Raw hash: bcce3c6efcf7b504a0fb184586e644c0b11042ceae8eb940425a1ea8e5fb75d8

Reporting entityAptos, Inc.

Victim entityNEW ENGLAND BIOLABS, INC.

Incidentdiscovered Nov 1, 2016

Stated responseAptos has worked with a leading cybersecurity firm to remove the malware from its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com