MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedRansom DemandedIdentity (basic)Government IDMediumContained

Morgan Truck Body

bd_87af241b4b5680dd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2021

Filed

Aug 3, 2021

To disclose

18 days

Affected

2state residents only

Linked

6 filings

Confidence

67%

Full breach record for Morgan Truck Body →

Morgan Truck Body, LLC notified the NH AG of a ransomware incident discovered July 16, 2021. Malware encrypted network components and ~100GB of data was exfiltrated. Two NH residents' PII (name, address, SSN) was compromised. Morgan engaged forensic specialists, cooperated with the FBI, and provided 2 years of LifeLock credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Jul 16, 2021

Discovered

Aug 3, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemarketobd_ab2f3139bfacb1012021-12-07 · +126dVerified by operator

Regulatory filings (4) · sorted by filing gap

Indiana State AGbd_4973c202178797d72021-08-06 · +3dVerified
Maine State AGbd_1a942dcf7feddfe42021-08-11 · +8dVerified
Massachusetts State AGbd_e5839443eddcabbf2021-08-13 · +10dVerified
Oregon State AGbd_045d7b090b49ef262021-08-23 · +20dCandidate

Name: Morgan
norm: morgan
Domain: morgandetoi.com

Name: Morgan Truck Body
norm: morgan truck body
Industry: Manufacturingllm

Discovered: Jul 16, 2021
Materiality determined: —
Notification sent: Aug 5, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau

During the incident: Launched an investigation with the assistance of third-party forensic specialists
Moved quickly to investigate and respond to the incident
Assess the security of Morgan systems
Notify potentially affected individuals
Working to implement additional safeguards and training to its employees
Providing access to credit monitoring services for two (2) years through LifeLock
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Notified the three major credit bureaus regarding this incident
Reported the incident to law enforcement and is cooperating with the FBI
Changes made: Implement additional safeguards and training to its employees
Implemented additional security measures designed to prevent a recurrence of such an attack
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

New Hampshire State AGAug 3 · first · this page

Indiana State AG+3d

Maine State AG+8d

Massachusetts State AG+10d

Oregon State AG+20d

Pattern: first filing Aug 3 (NH), last Aug 23 (OR) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mcsweeney-ricci-20210803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2021
Raw hash: 26373e1462372833d3552815eadbe9ce4b14497be0f279d149edcfebb1a94153

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityMorgan

Victim entityMorgan Truck Body

Incidentdiscovered Jul 16, 2021

Stated responseLaunched an investigation with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov