MalwareRansomwareVulnerability ExploitCapture Stored DataData ExfiltratedData EncryptedCustomer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
The National Right to Work Committee
bd_aca46c9875db8df4 · schema v1 · pii pii-v1
Full breach record for The National Right to Work Committee →The National Right to Work Committee notified the NH AG of a ransomware attack discovered on Nov 12, 2023. An unknown actor exploited a vulnerability in a public-facing forum to deploy ransomware, encrypt systems, and exfiltrate limited personal data. Two NH residents were affected. The network was shut down, forensic experts engaged, and law enforcement notified. Free credit monitoring is offered.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_03d1f27b9e17b1abIndiana State AGfiled 2024-01-17(26d gap)Verified
- bd_f5de8f7f52de66aeMaine State AGfiled 2024-01-22(31d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/national-right-work-committee-20231222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 22, 2023
- Raw hash
- 5d577fbfbe3d1a7915853a72477707f27291643ce814e9c34d9cc6080c170df2
Reporting entity
- Name
- The National Right to Work Committeenorm: the national right to work committee
Victim entity
- Name
- The National Right to Work Committeenorm: the national right to work committee
Incident
- Discovered
- Nov 12, 2023
- Materiality determined
- —
- Notification sent
- Dec 22, 2023
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection & Antitrust Bureau
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.