MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

Fonville Morisey

bd_940cc3564615214b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 26, 2021

Filed

Dec 29, 2021

To disclose

9 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for Fonville Morisey →2 incidents on file

Fonville Morisey notified the New Hampshire Attorney General of a ransomware attack discovered on October 26, 2021. The attacker accessed systems between October 22 and 28, 2021, encrypting files containing employee and customer names and Social Security numbers. Three New Hampshire residents were affected. Fonville Morisey offered two years of credit monitoring and implemented MFA.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 9 weeks / 64 days

Oct 22, 2021

Begins

Oct 26, 2021

Discovered

Dec 29, 2021

Filed

vs. sector median

10 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_0f6fc822f918ed792021-12-29Verified
Maine State AGbd_4850ddf6aab1120c2021-12-29Candidate
Montana State AGbd_54019f9073c3d4602021-12-29Verified
Massachusetts State AGbd_5ef6d6c08cf9e2242021-12-29Verified

Show 1 more filing ↓

Maine State AGbd_d2d7929302ee525e2021-12-29Verified

Name: FOX ROTHSCHILD LLP
norm: fox rothschild
Domain: foxrothschild.com

Name: Fonville Morisey
norm: fonville morisey
Industry: Professional Servicesllm

Discovered: Oct 26, 2021
Breach occurred: Oct 22, 2021 – Oct 28, 2021
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 29, 2021
Affected individuals: 3state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: provided notice of this incident to other state regulators and the consumer reporting agencies

During the incident: Engaged cybersecurity experts and launched an investigation
Mailed written notice of this incident to potentially impacted individuals
Offering potentially impacted individuals with (2) years of complimentary credit monitoring and identity restoration services
Notified state regulators and the consumer reporting agencies
Changes made: Reviewing its policies and procedures
Implementing Multi-Factor Authentication (MFA) on all accounts
Working with cybersecurity experts to implement additional safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(64 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGDec 29 · first

Maine State AGDec 29 · first

Montana State AGDec 29 · first

Massachusetts State AGDec 29 · first

Maine State AGDec 29 · first

New Hampshire State AGDec 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fonville-morisey-20211229.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 29, 2021
Raw hash: a1b4a7c260943c6a123fa5766859bf005cd91059fa8a1e7ccc39c4564bdd2a26

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityFOX ROTHSCHILD LLP

Victim entityFonville Morisey

Incidentdiscovered Oct 26, 2021

Stated responseEngaged cybersecurity experts and launched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov