MalwareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
GERSON LEHRMAN GROUP, INC.
bd_956c9ae2eb034ab4 · schema v1 · pii pii-v1
Full breach record for GERSON LEHRMAN GROUP, INC. →Gerson Lehrman Group, Inc. reported a ransomware incident on November 12, 2023, affecting personal information of 710 New Hampshire residents. GLG activated its incident response plan, engaged forensic experts, and notified federal law enforcement. Affected data included names and other PII. Remediation included enhanced access controls and employee retraining. Credit monitoring was offered to affected individuals.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_30321db2548f181fOregon State AGfiled 2024-03-12Candidate
- bd_40f515c14974b085Maine State AGfiled 2024-03-12Verified
- bd_690a00405f09498bCalifornia State AGfiled 2024-03-12Verified
- bd_6a5c413bc2a8a110Montana State AGfiled 2024-03-12Verified by operator
Show 2 more filings ↓Show fewer ↑
- bd_8477b7863a376585Vermont State AGfiled 2024-03-12Verified
- bd_a6d110a2d0e02830Washington State AGfiled 2024-03-12Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gerson-lehrman-group-20240312.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 12, 2024
- Raw hash
- 39cdc49e935bdd9bd6f695c02ecfdb9efcd1bce1a75a49bef81a0582bdaecd19
Reporting entity
- Name
- GERSON LEHRMAN GROUP, INC.norm: gerson lehrman
Victim entity
- Name
- GERSON LEHRMAN GROUP, INC.norm: gerson lehrman
Incident
- Discovered
- Nov 12, 2023
- Materiality determined
- —
- Notification sent
- Mar 12, 2024
- Affected individuals
- 710
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.