HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Aldrich Services LLP

bd_a27dcd1f508d0e59 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 11, 2023

Filed

Jul 8, 2024

To disclose

39 weeks

Affected

1state residents only

Confidence

66%

Full breach record for Aldrich Services LLP →4 incidents on file

Aldrich Services LLP filed a supplemental notice with the New Hampshire Attorney General regarding a data event affecting one NH resident. Unauthorized access to an employee email account occurred Oct 9-12, 2023. The company engaged forensic specialists, notified law enforcement, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 39 weeks / 271 days

Oct 9, 2023

Begins

Oct 11, 2023

Discovered

Jul 8, 2024

Filed

vs. sector median

+19 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Aldrich Services LLP
norm: aldrich services

Name: Aldrich Services LLP
norm: aldrich services
Industry: Professional Servicesllm

Discovered: Oct 11, 2023
Breach occurred: Oct 9, 2023 – Oct 12, 2023
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 8, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcementProvided written notice to relevant regulatory authorities
Initial access: valid_credentials

During the incident: Taking steps to secure the email account
Initiated an internal investigation
Engaged third-party forensic specialists to conduct a comprehensive investigation
Changing the account password
Notified federal law enforcement regarding the matter
Providing access to credit monitoring services for individuals whose information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this matter to relevant regulatory authorities, as required, and to the major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Reviewing, and where necessary, enhancing its policies and procedures related to data security to reduce the likelihood of a similar matter in the future
Providing additional training to employees regarding data security
Working toward implementing additional technical security measures designed to reduce the likelihood of a future similar incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 39 weeks(271 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aldrich-services-20240708.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2024
Raw hash: d1b78fdf4be09a27d9ad2b002655a2ea15d5faf61b32d5c05e64fb312d695df3

Reporting entityAldrich Services LLP

Victim entityAldrich Services LLP

Incidentdiscovered Oct 11, 2023

Stated responseTaking steps to secure the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov