MalwareManufacturingManufacturingRansomwareData ExfiltratedEmployee Data InvolvedEmploymentIdentity (basic)LowActive

Imperial Dade

bd_9b7cb10ccf367900 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 31, 2023

To disclose

—

Affected

16state residents only

Linked

4 records

Confidence

66%

Full breach record for Imperial Dade →

On July 19, 2023, an unauthorized third party accessed a system at Imperial Dade's Eastern Bag division to execute ransomware. The system housed records including employment application data. The investigation showed the actor may have accessed and acquired information about job applicants and employees. 16 New Hampshire residents were affected. Imperial Dade isolated the system, engaged forensic investigators, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jul 19, 2023

Begins

Aug 31, 2023

Filed

This filing is one of 4 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 38 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_4ed51d6f9a5e09d32023-07-24 · +38dVerified by operator

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_356f4741d66c31022023-09-01 · +1dCandidate
Massachusetts State AGbd_989ecccda39b5ac82023-09-01 · +1dVerified

Name: Imperial Dade
norm: imperial dade
Domain: ebpsupply.com

Name: Imperial Dade
norm: imperial dade
Domain: ebpsupply.com
Industry: Manufacturingllm

Discovered: —
Breach occurred: Jul 19, 2023
Materiality determined: —
Notification sent: Sep 1, 2023
Affected individuals: 16state-resident count only
Data types: EmploymentIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial

During the incident: Isolated the affected system and removed it from the network
Engaged a third party forensic investigation firm to investigate the nature and scope of the incident
Changes made: Implementing additional safeguards to better protect against a similar incident from occurring in the future
Offering potentially impacted individuals with complimentary credit monitoring and identity restoration services with Experian
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGAug 31 · first · this page

Maine State AG+1d

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/imperial-dade-20230831.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 31, 2023
Raw hash: d2bebbb0f7c7afed309582835eb1134bb5181fa3aad14f9d81d7cea8b8a94364

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityImperial Dade

Victim entityImperial Dade

IncidentRansomware

Stated responseIsolated the affected system and removed it from the network

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov