MalwareTechnologyInformationRansomwareBlack BastaData ExfiltratedRansom DemandedData EncryptedTargetedCustomer Data InvolvedIdentity (basic)LowContained

Northern Safety Co., Inc.

bd_8157633aaf3302d1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 7, 2024

Filed

Dec 2, 2024

To disclose

25 weeks

Affected

3state residents only

Linked

9 filings

Confidence

67%

Full breach record for Northern Safety Co., Inc. →

Northern Safety Company, Inc. reported a ransomware incident involving the Black Basta group. The breach was detected on June 7, 2024, resulting in the exfiltration of data from approximately 3 New Hampshire residents (current/former employees). NSC notified the FBI, engaged forensic experts, and restored systems. Notices were sent on November 25, 2024, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 25 weeks / 178 days

Jun 7, 2024

Discovered

Dec 2, 2024

Filed

vs. sector median

+7 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by black_basta about this victim predates this filing by 178 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (5)

Leak Siteapt73bd_446fc50a676defe12024-10-23 · +40dVerified by operator
Leak Siteblack_bastabd_7f7fdbc4708e1f282024-09-16 · +77dVerified by operator
Leak Siteapt73bd_a4cfc3b86cbf9cbb2024-09-16 · +77dVerified by operator
Leak Siteblack_bastabd_463fd1ff90d9bbaa2024-06-07 · +178dVerified by operator
Leak Siteblack_bastabd_d64ffde355d6a1612024-06-07 · +178dVerified by operator

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGBlack Bastabd_4554c1b2d784977d2024-11-25 · +7dVerified by operator
Massachusetts State AGbd_b6d333e09c5b23632024-11-25 · +7dVerified by operator
Indiana State AGbd_fa34a090de0763b72024-11-25 · +7dCandidate

Name: King & Spalding LLP
norm: king spalding

Name: Northern Safety Co., Inc.
norm: northern safety
Domain: northernsafety.com
Industry: Technologyllm

Discovered: Jun 7, 2024
Materiality determined: —
Notification sent: Nov 25, 2024
Affected individuals: 3state-resident count only
Data types: Identity (basic)
Attack vector: Ransomware· Black Basta
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: Black BastaExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation (FBI)NSC actively cooperated with the FBI over the course of several months

During the incident: Notified the Federal Bureau of Investigation (FBI)
Engaged third-party cybersecurity experts to assist with analysis and containment measures
Restored NSC systems to normal business operations
Undertook an extensive analysis of the impacted data
Changes made: Providing complimentary credit monitoring services through Experian
Reviewing and enhancing system security and administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(178 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

New Hampshire State AGNov 25 · first

Massachusetts State AGNov 25 · first

Indiana State AGNov 25 · first

New Hampshire State AG+7d · this page

Pattern: first filing Nov 25 (NH), last Dec 2 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/northern-safety-company-20241202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2024
Raw hash: 52e2476e4daf1ff2cb3c582ce1530c2794a2b3771fa27b556f33ac32a0746595

Linked disclosures

Ransomware claims (5)

Regulatory filings (3) · sorted by filing gap

Reporting entityKing & Spalding LLP

Victim entityNorthern Safety Co., Inc.

Incidentdiscovered Jun 7, 2024

Stated responseNotified the Federal Bureau of Investigation (FBI)

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov