MalwareRansomwareVulnerability ExploitData ExfiltratedData EncryptedCustomer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
National Right to Work Legal Defense Foundation
bd_7dc99321c7ca3014 · schema v1 · pii pii-v1
Full breach record for National Right to Work Legal Defense Foundation →National Right to Work Legal Defense Foundation reported a ransomware attack discovered on November 12, 2023. An unknown actor exploited a vulnerability in a public-facing forum to deploy ransomware, encrypt systems, and exfiltrate limited personal data. One New Hampshire resident was affected. The network was shut down, forensic experts were engaged, and law enforcement was notified. Notices were mailed on January 17, 2024.
Leak gap clock⏱ Leak >30d9 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 53 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9431c5cb2c473bceIndiana State AGfiled 2024-01-17(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-right-work-legal-defense-education-foundation-20240116.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 16, 2024
- Raw hash
- 2c61ca2818b6a13ecd080da43a667248f09e27c7ae86913445d34c35f6dcf878
Reporting entity
- Name
- National Right to Work Legal Defense Foundationnorm: national right to work legal defense
- Domain
- nrtw.org
Victim entity
- Name
- National Right to Work Legal Defense Foundationnorm: national right to work legal defense
- Domain
- nrtw.org
Incident
- Discovered
- Nov 12, 2023
- Materiality determined
- —
- Notification sent
- Jan 17, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(65 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.