MalwareRansomwareRansom DemandedData ExfiltratedData PublishedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Ohio History Connection
bd_7a49cabfe1afd57c · schema v1 · pii pii-v1
Full breach record for Ohio History Connection →Ohio Historical Society experienced a ransomware attack on July 9, 2023, resulting in data encryption and exfiltration. Cybercriminals demanded ransom, which was rejected. Three New Hampshire residents were affected. The organization notified the FBI, engaged forensic consultants, and offered credit monitoring.
Leak gap clock⏱ Leak >30d6 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 51 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_9ce48630b60efd5bLeak Sitedispossessorfiled 2023-07-26(28d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ohio-historical-society-20230823.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2023
- Raw hash
- a9005d07301cd809ff0fe624a0def954945d28bf0cc3a5a8bb944da4bed42316
Reporting entity
- Name
- Ohio History Connectionnorm: ohio history connection
- Domain
- ohiohistory.org
Victim entity
- Name
- Ohio History Connectionnorm: ohio history connection
- Domain
- ohiohistory.org
Incident
- Discovered
- Jul 9, 2023
- Materiality determined
- —
- Notification sent
- Aug 23, 2023
- Affected individuals
- 3
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- phishing_attachment
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.