MalwareRansomwareStolen CredentialsMulti-Stage ChainData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
EDW. C. Levy Co.
bd_a726a2229de3cf78 · schema v1 · pii pii-v1
Full breach record for EDW. C. Levy Co. →Edw. C. Levy Co. notified the NH Attorney General of a ransomware attack discovered on Nov 1, 2023. The incident involved unauthorized access to employee files and an email account. One New Hampshire resident's PII (including SSN) was potentially exposed. Notice was sent to the resident on Jan 16, 2025, offering credit monitoring. Investigation remains ongoing.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_b1187897469e6719Maine State AGfiled 2025-01-17Verified
- bd_4953a48093c7bc11Montana State AGfiled 2025-01-16(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/edw-c-levy-20250117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 17, 2025
- Raw hash
- 92e2cf29374389ee2ef7cf044a32a58a3eaa6751ee011482b229c5bda68b0898
Reporting entity
- Name
- EDW. C. Levy Co.norm: edw c levy
Victim entity
- Name
- EDW. C. Levy Co.norm: edw c levy
Incident
- Discovered
- Nov 1, 2023
- Materiality determined
- —
- Notification sent
- Jan 16, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- reported this incident to federal law enforcementprovided notice to the Office of the Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 months(443 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.