HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

TPI

bd_8986834f79f82c85 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 17, 2024

Filed

Aug 13, 2024

To disclose

8 weeks

Affected

1state residents only

Linked

3 records

Confidence

66%

Full breach record for TPI →3 incidents on file

TPI Corporation notified the New Hampshire Attorney General of a security breach where an unauthorized party accessed employee files between March 12 and June 17, 2024. One NH resident was impacted. TPI engaged third-party specialists, implemented additional security measures, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d8 weeks discovery → filing

Incident timeline

undetected · 97 days

discovery → filing · 8 weeks / 57 days

Mar 12, 2024

Begins

Jun 17, 2024

Discovered

Aug 13, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 3 records about the same incident.View merged incident

A leak claim by play about this victim was first seen 51 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_bbed0a5247f57ccd2024-06-11 · +63dCandidate

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_ab803c6f4182ca192024-08-13Verified

Name: TPI Composites Inc
norm: tpi composites
Domain: tpicomposites.com

Name: TPI
norm: tpi
Domain: tpicorp.com
Industry: Technologyllm

Discovered: Jun 17, 2024
Breach occurred: Mar 12, 2024 – Jun 17, 2024
Undetected for: 97 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 13, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Began an investigation with the assistance of third-party specialists
Conducted a thorough review of the files at issue
Notified potentially impacted individuals of this incident via First Class mail
Offering the potentially impacted resident of New Hampshire complimentary access to credit monitoring and identity protection services
Implemented additional security measures to further protect its network
Continues to review its policies and procedures related to data protection
Changes made: Implemented additional security measures to further protect its network and reduce the risk of a similar incident occurring in the future
Continues to review its policies and procedures related to data protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGAug 13 · first

New Hampshire State AGAug 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tpi-corporation-20240813.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2024
Raw hash: 74dbe9ecaeef15ed5a0f88efe660efc9f0fb0c9bfb24d0d14ceccbc48cbd75c1

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityTPI Composites Inc

Victim entityTPI

Incidentdiscovered Jun 17, 2024

Stated responseBegan an investigation with the assistance of third-party specialists

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov