HackingTechnologyInformationCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)LowContained

NewsBank

bd_7093a62978734b6a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 1, 2024

Filed

Jan 16, 2025

To disclose

28 weeks

Affected

155state residents only

Linked

8 records

Confidence

65%

Full breach record for NewsBank →

NewsBank, Inc. notified New Hampshire residents of a security incident where an unknown actor accessed systems between June 20 and July 1, 2024. NewsBank detected suspicious activity on July 1, 2024, engaged forensic specialists, and notified federal law enforcement. Personal information was viewed/downloaded. 155 NH residents were notified on Jan 16, 2025, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d28 weeks discovery → filing

Incident timeline

undetected · 11 days

discovery → filing · 28 weeks / 199 days

Jun 20, 2024

Begins

Jul 1, 2024

Discovered

Jan 16, 2025

Filed

vs. sector median

+18 wks slower

This filing is one of 8 records about the same incident.View merged incident

A leak claim by rhysida about this victim was first seen 143 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siterhysidabd_7e4bc7aaae98fa3f2024-07-01 · +199dVerified by operator

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_207fb642feb56fa02025-01-16Verified by operator
Nebraska State AGbd_44172157c774591c2025-01-16Verified
Indiana State AGbd_51a1db0ff81055aa2025-01-16Verified by operator
Massachusetts State AGbd_61e955736bb99eb72025-01-16Verified by operator

Show 2 more filings ↓up to 301d gap

Maine State AGbd_798b16b1f4a2b1812025-01-16Candidate
Maryland State AGbd_e141dc0d78ddf9c12025-11-13 · +301dVerified

Name: NewsBank
norm: newsbank
Domain: newsbank.com

Name: NewsBank
norm: newsbank
Domain: newsbank.com
Industry: Technologyllm

Discovered: Jul 1, 2024
Breach occurred: Jun 20, 2024 – Jul 1, 2024
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 16, 2025
Affected individuals: 155state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified federal law enforcementProviding written notice to relevant state regulators

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of NewsBank systems
Identified potentially affected individuals
Notified federal law enforcement regarding the event
Engaged third-party forensic specialists
Secured the network
Provided access to credit monitoring services through TransUnion
Changes made: Implementing additional safeguards and training to its employees
Reviewed security policies and procedures
Enhanced security measures to reduce the risk of similar future events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(199 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Vermont State AGJan 16 · first

Nebraska State AGJan 16 · first

Indiana State AGJan 16 · first

Massachusetts State AGJan 16 · first

Maine State AGJan 16 · first

New Hampshire State AGJan 16 · first · this page

Maryland State AG+301d

Pattern: first filing Jan 16 (VT), last Nov 13 (MD) — a 301-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/newsbank-20250116.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2025
Raw hash: f5ed74721c4c90d5c8cfebc11cdfc4b618d70672860235aa3db8418fe298634f

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityNewsBank

Victim entityNewsBank

Incidentdiscovered Jul 1, 2024

Stated responseMoved quickly to investigate and respond to the incident

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov