MalwareManufacturingRetail & ConsumerManufacturingRansomwareCapture Stored DataPYSAData ExfiltratedData EncryptedRansom DemandedDelayed DiscoveryTargetedIdentity (basic)Government IDMediumContained

Felix Storch, Inc.

bd_a0d9106d5d558c78 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 19, 2022

Filed

Oct 10, 2022

To disclose

7 weeks

Affected

1state residents only

Linked

2 filings

Confidence

68%

Full breach record for Felix Storch, Inc. →

Felix Storch, Inc. notified NH AG of a PYSA ransomware attack in Dec 2020. In Aug 2022, the company discovered personal info (names, SSNs) of 1 NH resident was exfiltrated. The company offered 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 625 days

discovery → filing · 7 weeks / 52 days

Dec 2, 2020

Begins

Aug 19, 2022

Discovered

Oct 10, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_063b31d3acbb265d2022-10-07 · +3dVerified

Name: Felix Storch, Inc.
norm: felix storch
Domain: felixstorchinc.com

Name: Felix Storch, Inc.
norm: felix storch
Domain: felixstorchinc.com
Industry: ManufacturingllmRetail & Consumerllm

Discovered: Aug 19, 2022
Breach occurred: Dec 2, 2020 – Dec 3, 2020
Undetected for: 625 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 12, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware· PYSA
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1190 Exploit Public-Facing Application
Threat actor: PYSAExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Conducted an internal investigation
Implemented robust remediation measures
Implemented recommendations provided by third party remediation experts
Offering the affected resident complimentary credit monitoring and identity theft protection for two years
Secured the services of Experian’s Identiy Works to provide identity monitoring at no cost to you for two years
Changes made: Implemented robust remediation measures
Implemented recommendations provided by third party remediation experts
Identified the issue that led to the unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 7 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/felix-storch-20221010.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 10, 2022
Raw hash: 824528c54d487667e722be47b7512bd2e5167f81f54cec4f2f9cebe3878eb732

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFelix Storch, Inc.

Victim entityFelix Storch, Inc.

Incidentdiscovered Aug 19, 2022

Stated responseConducted an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov