HackingTransportation & LogisticsTransportationStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentMediumContained

Columbia Helicopters, Inc.

bd_8ab106876d7e24b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 15, 2021

Filed

Aug 30, 2021

To disclose

7 weeks

Affected

2state residents only

Linked

6 filings

Confidence

65%

Full breach record for Columbia Helicopters, Inc. →

Columbia Helicopters, Inc. notified the NH AG of a data event affecting 2 NH residents. Unauthorized access occurred May 27–July 16, 2021; discovered July 15, 2021. Data included SSNs, financial accounts, driver's licenses, and health info. Response included network security, password resets, law enforcement notification, and 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 49 days

discovery → filing · 7 weeks / 46 days

May 27, 2021

Begins

Jul 15, 2021

Discovered

Aug 30, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Oregon State AGbd_098980ccc03a449a2021-08-24 · +6dCandidate
Massachusetts State AGbd_661957da4bcc99312021-08-24 · +6dVerified
Indiana State AGbd_9a737daf71a6f27b2021-08-24 · +6dVerified
Montana State AGbd_dafe7527a49bba832021-08-24 · +6dVerified

Show 1 more filing ↓up to 6d gap

Maine State AGbd_f76bf4fa8ccb12802021-08-24 · +6dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Columbia Helicopters, Inc.
norm: columbia helicopters
Industry: Transportation & Logisticsllm

Discovered: Jul 15, 2021
Breach occurred: May 27, 2021 – Jul 16, 2021
Undetected for: 49 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 24, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Employment
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Provided written notice to New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Moved quickly to secure the network
Began an investigation to identify what happened
Resetting relevant account passwords
Notified federal law enforcement
Providing access to credit monitoring services for twelve (12) months, through Epiq
Changes made: Working to implement additional safeguards and training to its employees
Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(46 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Oregon State AGAug 24 · first

Massachusetts State AGAug 24 · first

Indiana State AGAug 24 · first

Montana State AGAug 24 · first

Maine State AGAug 24 · first

New Hampshire State AG+6d · this page

Pattern: first filing Aug 24 (OR), last Aug 30 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/columbia-helicopters-20210830.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2021
Raw hash: 0634d3fda9527f6a8ba58d2ae04139643fc9810d3d95b2eedf421473d7200d13

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityColumbia Helicopters, Inc.

Incidentdiscovered Jul 15, 2021

Stated responseMoved quickly to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov