MalwareEducationEducationRansomwareData EncryptedRansom DemandedData PublishedCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

Ohio Historical Society

bd_7a49cabfe1afd57c · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 9, 2023

Filed

Aug 23, 2023

To disclose

6 weeks

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for Ohio Historical Society →3 incidents on file

On July 9, 2023, cyber criminals executed a ransomware attack on the Ohio Historical Society (dba Ohio History Connection), encrypting data on internal servers. The attackers demanded a ransom which the organization could not pay; after an offer was rejected, some data was released to the public. The incident potentially affected 3 New Hampshire residents (donors). The organization engaged forensic consultants, notified the FBI, and offered credit monitoring. Systems were restored and migrated to cloud-based services with enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

Jul 9, 2023

Begins

Jul 9, 2023

Discovered

Aug 23, 2023

Filed

vs. sector median

2 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_15e2608dae4ada292023-07-27 · +27dVerified by operator
Leak Sitelockbit_3bd_cc0d34f222cd3fd22023-07-03 · +51dVerified by operator

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_67ba20458f527e6b2023-08-23Candidate
Vermont State AGbd_f6e7484647a602c92023-08-23Verified by operator

Name: Ohio Historical Society
norm: ohio historical society

Name: Ohio Historical Society
norm: ohio historical society
Industry: Educationllm

Discovered: Jul 9, 2023
Breach occurred: Jul 9, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 23, 2023
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1566 Phishing
Threat actor: ExternalFinancial
Regulator citations: Notified the FBIFiled notification with New Hampshire Attorney General
Initial access: phishing_link

During the incident: Employed various IT forensic consultants and other IT professionals to assess the extent of the breach
Notified the FBI
Retained forensic IT consulting firms to assist in determining the extent of the data breach, reconstructing its systems and restoring data
Employed a consultant that specializes in communicating with groups who engage in cybercriminal activity
Offered credit monitoring and identity restoration services through IDX/Zerofox
Notified all three national credit reporting agencies
Changes made: Restored its data and systems
Upgraded its systems to make them less vulnerable to such attacks
Moved a vast majority of its data to cloud-based services
Implemented new security systems, features and measures intended to reduce its vulnerability to future attacks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGAug 23 · first

Vermont State AGAug 23 · first

New Hampshire State AGAug 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ohio-historical-society-20230823.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2023
Raw hash: a9005d07301cd809ff0fe624a0def954945d28bf0cc3a5a8bb944da4bed42316

Linked disclosures

Ransomware claims (2)

Regulatory filings (2) · sorted by filing gap

Reporting entityOhio Historical Society

Victim entityOhio Historical Society

Incidentdiscovered Jul 9, 2023

Stated responseEmployed various IT forensic consultants and other IT professionals to assess the extent of the breach

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov