MalwareRansomwareData ExfiltratedData EncryptedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
New Enchantment Group
bd_78a190d0aced6271 · schema v1 · pii pii-v1
Full breach record for New Enchantment Group →New Enchantment Group, LLC reported a ransomware incident where an unauthorized third party encrypted data and exfiltrated documents containing names, dates of birth, and driver's license numbers between Oct 3-4, 2022. The company restored data from backups, engaged forensic investigators, and offered one year of Experian IdentityWorks credit monitoring to affected individuals.
Vermont clock✗ VT AG >45 bday21 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_533e4cbc463cf14cMaine State AGfiled 2023-02-28Candidate
- bd_d6371abd174a16f9Montana State AGfiled 2023-02-28Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-02-28-new-enchantment-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2023
- Raw hash
- d569b8ecde7b3f1d7c8a43b3599cc3a106501905e25739823326369e79ba3182
Reporting entity
- Name
- New Enchantment Groupnorm: new enchantment
Victim entity
- Name
- New Enchantment Groupnorm: new enchantment
Incident
- Discovered
- Oct 4, 2022
- Materiality determined
- —
- Notification sent
- Feb 28, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.