MalwareRansomwarePlayData ExfiltratedRansom DemandedCustomer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
RRCA Accounts Management
bd_6dd7b59ed1d0470a · schema v1 · pii pii-v1
Full breach record for RRCA Accounts Management →RRCA Accounts Management Inc. notified the New Hampshire Attorney General of a ransomware incident involving the 'Play' threat actor. The attack occurred on June 6, 2024, and was discovered on August 20, 2024. The breach potentially impacted the personal information of 7 New Hampshire residents. RRCA provided credit monitoring services and implemented additional security measures.
Leak gap clock⏱ Leak >90d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 140 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_3ff5cc1b53b2ffecLeak Siteplayfiled 2024-06-06(140d gap)Verified
Regulatory filings (2) · sorted by filing gap
- bd_fe0fca51d11f4a22Montana State AGfiled 2024-10-23(1d gap)Verified
- bd_b65ad39380a06befHHS OCRfiled 2024-10-18(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/rrca-accounts-management-20241024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 24, 2024
- Raw hash
- 240bb2b47e35d72e5b57f4f3e01a9299b4807da5d2fffb8de7812cbd8c6146ea
Reporting entity
- Name
- HINSHAW & CULBERTSON LLPnorm: hinshaw culbertson
Victim entity
- Name
- RRCA Accounts Managementnorm: rrca accounts management
- Domain
- rrcaaccounts.com
Incident
- Discovered
- Aug 20, 2024
- Materiality determined
- —
- Notification sent
- Oct 18, 2024
- Affected individuals
- 7
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware· Play
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- PlayExternalFinancial
- Regulator citations
- Notified the Office of the New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.