HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
Worthen Industries
bd_6cc0290a8ea3c922 · schema v1 · pii pii-v1
Full breach record for Worthen Industries →Worthen Industries, Inc. notified the New Hampshire Attorney General of a data security incident affecting 640 state residents. Unauthorized access occurred between Dec 28, 2023 and Jan 14, 2024. Worthen detected unusual activity on Jan 13, 2024, engaged external experts, and reported to the FBI. Personal information was acquired. Credit monitoring services were offered to affected individuals.
Leak gap clock⏱ Leak >90d15 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by alphv about this victim predates this filing by 99 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_b5b054bc9a1e3e9fLeak Site8basefiled 2024-01-24(96d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_273abf94e0302acbMaine State AGfiled 2024-04-29Verified
- bd_de0797cdb1393f92Vermont State AGfiled 2024-04-10(19d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/worthen-industries-20240429.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 29, 2024
- Raw hash
- f92095cb6996d2480e64ab8e4ac6ec68a4b3eac0e3a12c0a4f3987d74a79fb21
Reporting entity
- Name
- Worthen Industriesnorm: worthen industries
- Domain
- worthenind.com
Victim entity
- Name
- Worthen Industriesnorm: worthen industries
- Domain
- worthenind.com
Incident
- Discovered
- Jan 13, 2024
- Materiality determined
- Mar 15, 2024
- Notification sent
- Apr 10, 2024
- Affected individuals
- 640
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John M. Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(107 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.