HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Worthen Industries

bd_6cc0290a8ea3c922 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 13, 2024

Filed

Apr 29, 2024

To disclose

15 weeks

Affected

640state residents only

Linked

9 records

Confidence

65%

Full breach record for Worthen Industries →

Worthen Industries, Inc. notified the New Hampshire Attorney General of a data security incident affecting 640 state residents. Unauthorized access occurred between Dec 28, 2023 and Jan 14, 2024. Worthen detected unusual activity on Jan 13, 2024, engaged external experts, and reported to the FBI. Personal information was acquired. Credit monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d15 weeks discovery → filing

Incident timeline

undetected · 16 days

discovery → filing · 15 weeks / 107 days

Dec 28, 2023

Begins

Jan 13, 2024

Discovered

Mar 15, 2024

Scope determined

Apr 29, 2024

Filed

This filing is one of 9 records about the same incident.View merged incident

A leak claim by alphv about this victim was first seen 100 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (5)

Leak Sitelockbit_3bd_38bcb82ea5d9f2dd2024-03-14 · +45dCandidate
Leak Sitealphvbd_23bd5ab10bee195d2024-02-24 · +64dVerified by operator
Leak Sitealphvbd_cf74b4f5a39cd0c02024-02-22 · +67dVerified by operator
Leak Site8basebd_b5b054bc9a1e3e9f2024-01-24 · +96dVerified by operator
Leak Sitealphvbd_c123ec15fc4cca472024-01-20 · +100dVerified by operator

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_273abf94e0302acb2024-04-29Verified
Massachusetts State AGbd_55bbfd6d220d10d42024-04-30 · +1dVerified by operator
Vermont State AGbd_de0797cdb1393f922024-04-10 · +19dVerified

Name: Worthen Industries
norm: worthen industries
Domain: worthenind.com

Name: Worthen Industries
norm: worthen industries
Domain: worthenind.com
Industry: Manufacturingllm

Discovered: Jan 13, 2024
Breach occurred: Dec 28, 2023 – Jan 14, 2024
Undetected for: 16 daysoccurrence → discovery
Materiality determined: Mar 15, 2024
Notification sent: Apr 10, 2024
Affected individuals: 640state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John M. Formella
Initial access: valid_credentials

During the incident: Engaged a team of external cybersecurity experts to assist in its response and conduct an investigation
Reported the matter to the FBI and will cooperate with any resulting investigation
Offering complimentary credit monitoring and identity protection services through IDX, A ZeroFox Company
Changes made: Implemented additional measures to enhance our network security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(107 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Vermont State AGApr 10 · first

Maine State AG+19d

New Hampshire State AG+19d · this page

Massachusetts State AG+20d

Pattern: first filing Apr 10 (VT), last Apr 30 (MA) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/worthen-industries-20240429.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2024
Raw hash: f92095cb6996d2480e64ab8e4ac6ec68a4b3eac0e3a12c0a4f3987d74a79fb21

Linked disclosures

Ransomware claims (5)

Regulatory filings (3) · sorted by filing gap

Reporting entityWorthen Industries

Victim entityWorthen Industries

Incidentdiscovered Jan 13, 2024

Stated responseEngaged a team of external cybersecurity experts to assist in its response and conduct an investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov