HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Miller's Ale House

bd_8c1372c1a8c417d8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 30, 2020

Filed

Mar 26, 2021

To disclose

12 weeks

Affected

1state residents only

Linked

4 filings

Confidence

67%

Full breach record for Miller's Ale House →

Miller’s Ale House, Inc. notified the New Hampshire Attorney General of a security incident affecting one NH resident. Unauthorized access to network devices occurred, leading to file copying and exfiltration. Data included name, SSN, and direct deposit account number for an employee. Discovered Dec 30, 2020. Notification sent March 25, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 86 days

Dec 30, 2020

Discovered

Mar 26, 2021

Filed

vs. sector median

+5 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_57ec869b27eb00922021-03-25 · +1dVerified
Indiana State AGbd_94cb4b0547f049a02021-03-25 · +1dVerified
Maine State AGbd_bb0265e33713c3382021-03-25 · +1dCandidate

Name: Miller's Ale House
norm: miller s ale house

Name: Miller's Ale House
norm: miller s ale house
Industry: Retail & Consumerllm

Discovered: Dec 30, 2020
Materiality determined: —
Notification sent: Mar 25, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Gordon MacDonald
Initial access: valid_credentials

During the incident: Took steps to secure the network
Began an investigation with the assistance of a cybersecurity firm
Working with law enforcement
Working with the operator of the service that hosts the external device to have access to the files shut off
Performed a thorough review of the files
Established a dedicated, toll-free call center
Offering the individual a complimentary one-year membership to credit monitoring and identity theft protection services
Changes made: Implemented and will continue to implement enhanced network security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(86 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 25 · first

Indiana State AGMar 25 · first

Maine State AGMar 25 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/millers-ale-house-20210326.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 26, 2021
Raw hash: 6dbe51e7768c8f49971af0d3c249742d33c66c3c5a812d2a50bef12894973bcb

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMiller's Ale House

Victim entityMiller's Ale House

Incidentdiscovered Dec 30, 2020

Stated responseTook steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov