MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedPIIIdentity (basic)LowContained

PMA Consultants

bd_7d2860b96ee0522a · schema v1 · pii pii-v1

Severity

Low

Discovered

May 7, 2024

Filed

Mar 17, 2025

To disclose

45 weeks

Affected

6state residents only

Linked

7 filings

Confidence

67%

Full breach record for PMA Consultants →

PMA Consultants, a professional services firm, issued a supplemental notification regarding a ransomware attack discovered on May 7, 2024. The incident resulted in unauthorized access to PII of 6 New Hampshire residents. PMA engaged forensic specialists, reported to federal law enforcement, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 45 weeks / 314 days

May 7, 2024

Discovered

Mar 17, 2025

Filed

vs. sector median

+26 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_7b8da585f4ff44552025-03-17Verified
Indiana State AGbd_93723ad4fd2818342025-03-17Verified
Maryland State AGbd_fd0865727c08d5842025-03-17Verified
Massachusetts State AGbd_ce35cec346b7fd9a2025-01-30 · +46dVerified

Show 2 more filings ↓up to 46d gap

Maine State AGbd_e55973011bb404be2025-01-30 · +46dCandidate
New Hampshire State AGbd_fee1b469d6f3bacd2025-01-30 · +46dCandidate

Name: PMA Consultants
norm: pma consultants

Name: PMA Consultants
norm: pma consultants
Industry: Professional Servicesllm

Discovered: May 7, 2024
Materiality determined: —
Notification sent: Mar 17, 2025
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to federal law enforcementProvided notice to this office on January 30, 2025

During the incident: Began working with its I.T. team and third-party forensic specialists to secure the network
Restored its systems to operability
Investigated the full nature and scope of the incident
Reported this incident to federal law enforcement
Began a comprehensive and time-consuming review of the potentially impacted files
Provided notice to an initial wave of potentially impacted individuals on January 28, 2025
Provided notice to this office on January 30, 2025
Sent written notice of this incident to the additional potentially impacted New Hampshire residents
Offered complimentary credit monitoring and identity theft protection services
Changes made: Secured the network
Restored its systems to operability
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(314 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Massachusetts State AGJan 30 · first

Maine State AGJan 30 · first

New Hampshire State AGJan 30 · first

Maine State AG+46d

Indiana State AG+46d

Maryland State AG+46d

New Hampshire State AG+46d · this page

Pattern: first filing Jan 30 (MA), last Mar 17 (NH) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pma-consultants-20250317.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2025
Raw hash: 527cae59716e9a2cd2f258fa803c72b133ea47ae93d7188dd0d8c7e186aef153

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityPMA Consultants

Victim entityPMA Consultants

Incidentdiscovered May 7, 2024

Stated responseBegan working with its I.T. team and third-party forensic specialists to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov