HackingTechnologyInformationCustomer Data InvolvedPIIPHIIdentity (basic)Government IDMinorMediumContained

siParadigm LLC

bd_a8d0d8c49244dbd7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 11, 2024

Filed

Sep 19, 2024

To disclose

14 weeks

Affected

7state residents only

Linked

9 filings

Confidence

66%

Full breach record for siParadigm LLC →2 incidents on file

siParadigm LLC notified the New Hampshire Attorney General of a data security incident detected on June 11, 2024, where an unauthorized third party compromised its network. The incident potentially impacted personal and health information of New Hampshire residents. siParadigm secured the network, engaged third-party experts, notified law enforcement, and mailed notification letters on September 18, 2024, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d14 weeks discovery → filing

Incident timeline

discovery → filing · 14 weeks / 100 days

Jun 11, 2024

Discovered

Sep 19, 2024

Filed

vs. sector median

4 wks faster

This filing is one of 9 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 57 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_f386f8a45f4b5b972024-07-23 · +57dVerified by operator

Regulatory filings (7) · sorted by filing gap

Montana State AGbd_138e02033976bdd22024-09-19Verified by operator
Maine State AGbd_67c8c9c6e3d1576a2024-09-19Verified
California State AGbd_84f86b3d08b3fef82024-09-19Verified
Massachusetts State AGbd_5de13dead78b8c782024-09-20 · +1dVerified by operator

Show 3 more filings ↓up to 41d gap

Vermont State AGbd_3c07eba5a794139c2024-09-18 · +1dVerified by operator
Indiana State AGbd_e363649eebe1e9182024-09-18 · +1dVerified by operator
HHS OCRbd_516065a53e6f912c2024-08-09 · +41dVerified

Name: siParadigm LLC
norm: siparadigm

Name: siParadigm LLC
norm: siparadigm
Industry: Technologyllm

Discovered: Jun 11, 2024
Materiality determined: —
Notification sent: Sep 18, 2024
Affected individuals: 7state-resident count only
Data types: PIIPHIIdentity (basic)Government IDMinor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: exploit_public_facing

During the incident: Secured and remediated the compromise
Engaged additional third-party experts
Enhanced its data security
Commenced an investigation
Worked with specialized third parties to investigate how the incident occurred and take appropriate remedial and hardening steps to enhance network security and data privacy
Notified law enforcement regarding this incident
Mailed notification letters to seven (7) residents of your state
Offered complimentary credit monitoring and identity protection services for through Cyberscout, a TransUnion company specializing in fraud assistance and remediation services
Offered insurance coverage for applicable instances of identity theft
Changes made: Enhanced its data security
Take appropriate remedial and hardening steps to enhance network security and data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

HHS OCRAug 9 · first

Vermont State AG+40d

Indiana State AG+40d

Montana State AG+41d

Maine State AG+41d

California State AG+41d

New Hampshire State AG+41d · this page

Massachusetts State AG+42d

Pattern: first filing Aug 9 (NJ), last Sep 20 (MA) — a 42-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/siparadigm-20240919.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2024
Raw hash: 3531c4ba33451627005f6903ed0f144367f5c98cf90285ff81d3fff309a5ad08

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entitysiParadigm LLC

Victim entitysiParadigm LLC

Incidentdiscovered Jun 11, 2024

Stated responseSecured and remediated the compromise

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov