HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Legacy Supply Chain
bd_903e12cc3c10ca9c · schema v1 · pii pii-v1
Full breach record for Legacy Supply Chain →Legacy Supply Chain notified New Hampshire residents of a cyberattack where attackers gained unauthorized access to IT systems and exfiltrated employee personal information, including names, addresses, Social Security numbers, and direct deposit details. The company isolated the attack, engaged third-party forensic investigators, reported the incident to law enforcement, and is offering two years of complimentary identity monitoring services through Kroll. No evidence of misuse was found at the time of notification.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_491f4884108f0d6bCalifornia State AGfiled 2022-09-02Verified
- bd_5ca8c439c7ae49fdMaine State AGfiled 2022-09-02Verified
- bd_0fa50a44731b1dbdMaine State AGfiled 2022-08-31(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/legacy-supply-chain-20220902.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 2, 2022
- Raw hash
- 816ef0d6d64318daa891c05784cf265ac7f1b17a0eacc36b9832382f5be2fd34
Reporting entity
- Name
- Legacy Supply Chainnorm: legacy supply chain
Victim entity
- Name
- Legacy Supply Chainnorm: legacy supply chain
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Sep 2, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the attack to law enforcement
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.