HackingTechnologyTransportation & LogisticsInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Diligent Delivery Systems

bd_76352fa20710ca85 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 11, 2024

Filed

Nov 5, 2024

To disclose

17 weeks

Affected

8state residents only

Linked

7 filings

Confidence

66%

Full breach record for Diligent Delivery Systems →

Diligent Delivery Systems notified the NH AG of a data security incident discovered on July 11, 2024. An unknown actor gained access to systems, impacting personal information of 8 NH residents. Diligent engaged cybersecurity experts, secured its environment, reported to federal law enforcement, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d17 weeks discovery → filing

Incident timeline

discovery → filing · 17 weeks / 117 days

Jul 11, 2024

Discovered

Oct 25, 2024

Scope determined

Nov 5, 2024

Filed

vs. sector median

2 wks faster

This filing is one of 7 about the same incident.View merged incident

A leak claim by embargo about this victim predates this filing by 117 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_25eab650238a41622024-07-11 · +117dVerified by operator

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_1455692a25a6ff642024-11-05Verified by operator
Vermont State AGbd_5082cf82f4a727732024-11-05Verified
Indiana State AGbd_6507958dfc96f7582024-11-05Candidate
Maine State AGbd_7fb5c0efe1f01c6a2024-11-05Verified

Show 1 more filing ↓

California State AGbd_dcb2167b11ac9df42024-11-05Verified

Name: Diligent Delivery Systems
norm: diligent delivery
Domain: diligentusa.com

Name: Diligent Delivery Systems
norm: diligent delivery
Domain: diligentusa.com
Industry: TechnologyllmTransportation & Logisticsllm

Discovered: Jul 11, 2024
Materiality determined: Oct 25, 2024
Notification sent: Nov 5, 2024
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: valid_credentials

During the incident: Engaged leading, independent cybersecurity experts to assist with an investigation
Took steps to secure its digital environment
Reported this incident to federal law enforcement
Notified affected individuals by letter mailed via first class U.S. mail
Provided complimentary credit monitoring and identity protection services through IDX by Zerofox
Changes made: Implemented additional security measures to further harden its environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(117 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGNov 5 · first

Vermont State AGNov 5 · first

Indiana State AGNov 5 · first

Maine State AGNov 5 · first

California State AGNov 5 · first

New Hampshire State AGNov 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/diligent-delivery-systems-20241105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2024
Raw hash: d44392c5a0a9756199221322750cd4eae04a6c2db142577afce1fc3889356f06

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityDiligent Delivery Systems

Victim entityDiligent Delivery Systems

Incidentdiscovered Jul 11, 2024

Stated responseEngaged leading, independent cybersecurity experts to assist with an investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov