MalwareHealthcareManufacturingHealthcareRansomwareData ExfiltratedCustomer Data InvolvedGovernment IDFinancial accountPHIHealth (basic)Identity (basic)MediumContained

Peter Brasseler Holdings

bd_a7df462dac47ceec · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 1, 2023

Filed

Mar 31, 2023

To disclose

13 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Peter Brasseler Holdings →2 incidents on file

Brasseler entities suffered a ransomware attack on June 24, 2022. In early 2023, they discovered unauthorized access to files containing SSNs, driver's licenses, passport numbers, credit/debit card numbers, medical/insurance info, and dates of birth. Systems were secured, forensic investigation conducted, and law enforcement notified. 24 months of credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 191 days

discovery → filing · 13 weeks / 89 days

Jun 24, 2022

Begins

Jan 1, 2023

Discovered

Mar 31, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Vermont State AGbd_a55f97f4e13ec8232023-03-31Verified
Maine State AGbd_8c9b6db493fd1f462023-03-30 · +1dVerified
New Hampshire State AGbd_8d6662acf8d6d3892023-03-29 · +2dCandidate

Name: Peter Brasseler Holdings
norm: peter brasseler

Name: Peter Brasseler Holdings
norm: peter brasseler
Industry: HealthcarellmManufacturingllm

Discovered: Jan 1, 2023
Breach occurred: Jun 24, 2022
Undetected for: 191 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2023
Affected individuals: Not disclosed
Data types: Government IDFinancial accountPHIHealth (basic)Identity (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Contacted law enforcement

During the incident: Began an investigation to understand the scope of the incident with an outside forensic firm
Secured our information technology systems
Contacted law enforcement
Conducted an investigation to identify and remove any malicious files
Confirmed that no other company systems were impacted
Implemented increased security measures to further protect our systems
Changes made: Providing identity detection and resolution tools through Experian
Providing a complimentary 24-month membership to Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(89 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGMar 29 · first

Maine State AG+1d

Vermont State AG+2d

California State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-564958
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2023
Raw hash: e82b71fdf477602421a913588bf0de0fa8b6d75728ff3987b56e47bfc842e5c3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityPeter Brasseler Holdings

Victim entityPeter Brasseler Holdings

Incidentdiscovered Jan 1, 2023

Stated responseBegan an investigation to understand the scope of the incident with an outside forensic firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov