HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)LowContained

West Technology Group

bd_9717a23a5ec75044 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 1, 2022

Filed

Apr 18, 2023

To disclose

20 weeks

Affected

28state residents only

Linked

4 filings

Confidence

67%

Full breach record for West Technology Group →

West Technology Group, LLC notified the NH Attorney General of a security incident where an unauthorized third party gained remote access to its corporate network on December 1, 2022. The incident affected 19 individuals initially, with a subsequent determination that 28 New Hampshire residents were also affected. Personal information was taken. WTG engaged cybersecurity experts, notified law enforcement, and provided one year of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 weeks / 138 days

Dec 1, 2022

Discovered

Apr 18, 2023

Filed

vs. sector median

+9 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_402d2474bcf136ed2023-04-18Verified
Maine State AGbd_d092c9aefe6e61852023-04-18Candidate
Vermont State AGbd_f498dc3722b0d99b2023-04-18Verified

Name: West Technology Group
norm: west technology
Domain: west.com

Name: West Technology Group
norm: west technology
Domain: west.com
Industry: Technologyllm

Discovered: Dec 1, 2022
Materiality determined: —
Notification sent: Dec 31, 2022
Affected individuals: 28state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Took steps to secure the network
Began an investigation of the incident with the support of leading outside cybersecurity experts
Notified law enforcement
Provided credit monitoring and identity monitoring services through Experian
Changes made: Instituted a series of additional security measures to help prevent any future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(138 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 18 · first

Maine State AGApr 18 · first

Vermont State AGApr 18 · first

New Hampshire State AGApr 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/west-technology-group-20230418.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 18, 2023
Raw hash: e8f318ab585fe63bdc0bfac1cfb48ea7406f99b35ba5ef7908ecf5d78d43d24a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWest Technology Group

Victim entityWest Technology Group

Incidentdiscovered Dec 1, 2022

Stated responseTook steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov