MalwareRansomwareCapture Stored DataRansom DemandedData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Group 1001 Resources, Inc.
bd_a558e29b4e2a910e · schema v1 · pii pii-v1
Full breach record for Group 1001 Resources, Inc. →Group 1001 Resources, LLC notified the NH Attorney General on July 28, 2023, of a ransomware incident detected on February 9, 2023. The attacker accessed and exfiltrated files containing personal information of approximately 21 New Hampshire residents, including names, SSNs, and driver's license numbers. The company engaged forensic investigators, notified the FBI, did not pay ransom, and provided 24 months of credit monitoring and identity protection services to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_5f1115811e558a14Maine State AGfiled 2023-07-28Candidate
- bd_bfc6ac84104203c2New Hampshire State AGfiled 2023-11-21(116d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/group-1001-resources-20230728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2023
- Raw hash
- 15235111b16d44fc99cecabc453ebddefbd54f52daab19ed12bac7ea7c07aca9
Reporting entity
- Name
- Group 1001 Resources, Inc.norm: group 1001 resources
Victim entity
- Name
- Group 1001 Resources, Inc.norm: group 1001 resources
Incident
- Discovered
- Feb 9, 2023
- Materiality determined
- Jul 10, 2023
- Notification sent
- Jul 28, 2023
- Affected individuals
- 21
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of InvestigationAlerted appropriate regulatory authorities
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.