HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedMulti-Stage ChainPIILowContained

CHI Aviation

bd_995c7f131ea504d3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 26, 2025

Filed

Apr 29, 2025

To disclose

5 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for CHI Aviation →

Construction Helicopters, Inc. (dba CHI Aviation) notified the NH AG of a criminal cyber-attack discovered on March 26, 2025, involving a compromised third-party user account. One NH resident was impacted. The company engaged the FBI and forensic experts, severed networks, removed VPN access, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 34 days

Mar 26, 2025

Discovered

Apr 29, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_6fb41c7eacfff5522025-04-26 · +3dCandidate

Name: CHI Aviation
norm: chi aviation
Domain: chiaviation.com

Name: CHI Aviation
norm: chi aviation
Domain: chiaviation.com
Also named: Construction Helicopters, Inc.dba oflegal entity
CHI Aviationdba oftrade name
Industry: Transportation & Logisticsllm

Discovered: Mar 26, 2025
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: PII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralContacted the FBI
Initial access: valid_credentials

During the incident: Contacting the FBI
Hiring a forensic cybersecurity firm
Severing any affected networks
Removing VPN access for all users
Working closely with third-party cybersecurity experts
Retained NortonLifeLock to provide complimentary LifeLock Defender Choice identity theft protection
Changes made: Conducting a thorough review of its security protocols and technologies
Working with cybersecurity specialists to ensure that our systems are secure, prevent similar occurrences in the future, and limit threats that may put any personal information at risk
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGApr 26 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/construction-helicopters-chi-aviation-20250429.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 29, 2025
Raw hash: 54c58854f64983001c298a1f7cc48697d8daacea18dfd5c2db70a268acfc82c2

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCHI Aviation

Victim entityCHI Aviation

Incidentdiscovered Mar 26, 2025

Stated responseContacting the FBI

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov