MalwareTechnologyHealthcareInformationRansomwareBlack BastaData ExfiltratedData EncryptedData PublishedCustomer Data InvolvedActor NamedGovernment IDIdentity (basic)MediumContained

WorldOne Inc.

bd_8b6e47cbe8564c3e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 10, 2024

Filed

Feb 9, 2026

To disclose

22 months

Affected

9state residents only

Linked

7 records

Confidence

66%

Full breach record for WorldOne Inc. →2 incidents on file

WorldOne Inc. dba Sermo notified the New Hampshire Attorney General of a ransomware incident involving Black Basta. Unauthorized access occurred between March 19 and April 10, 2024, resulting in the exfiltration and publication of personal information, including Social Security numbers, of 9 New Hampshire residents. Notifications were sent on February 9, 2026, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d22 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 22 days

discovery → filing · 22 months / 670 days

Mar 19, 2024

Begins

Apr 10, 2024

Discovered

Feb 9, 2026

Filed

vs. sector median

+85 wks slower

This filing is one of 7 records about the same incident.View merged incident

A leak claim by black_basta about this victim was first seen 671 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_39f8b9fed6617a2e2024-03-19 · +692dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_2c692d17ae0811bd2026-02-09Candidate
Nebraska State AGBlack Bastabd_4bf2974957f53ef32026-02-09Verified by operator
Maine State AGBlack Bastabd_7c49c9b0c9b49ab62026-02-09Verified by operator
Indiana State AGbd_f9e4422ef61e72ae2026-02-09Verified by operator

Show 1 more filing ↓up to 1d gap

Massachusetts State AGbd_b588b71b7c55954f2026-02-10 · +1dVerified

Name: WorldOne Inc.
norm: worldone
Domain: sermo.com

Name: WorldOne Inc.
norm: worldone
Domain: sermo.com
Also named: WorldOne Inc.dba oflegal entity
Sermodba oftrade name
Industry: TechnologyllmHealthcarellm

Discovered: Apr 10, 2024
Breach occurred: Mar 19, 2024 – Apr 10, 2024
Undetected for: 22 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2026
Affected individuals: 9state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Ransomware· Black Basta
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: Black BastaExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Retained cybersecurity professionals to investigate
Secured network environment
Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Offered 12 months of complimentary identity monitoring services through Kroll
Changes made: Reviewed and updated existing security policies and protections
Implemented additional security to safeguard against evolving threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 months(670 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGFeb 9 · first

Nebraska State AGFeb 9 · first

Maine State AGFeb 9 · first

Indiana State AGFeb 9 · first

New Hampshire State AGFeb 9 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/worldone-sermo-20260209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2026
Raw hash: 0fb3f6af452792d5a0786b756c3cf559e90ac28c1838eda609443b95a7ac6384

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityWorldOne Inc.

Victim entityWorldOne Inc.

Incidentdiscovered Apr 10, 2024

Stated responseRetained cybersecurity professionals to investigate

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov