MalwareProfessional ServicesProfessional ServicesRansomwareVulnerability ExploitData ExfiltratedData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowContained

The National Right to Work Committee

bd_aca46c9875db8df4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 12, 2023

Filed

Dec 22, 2023

To disclose

6 weeks

Affected

2state residents only

Linked

3 filings

Confidence

67%

Full breach record for The National Right to Work Committee →

The National Right to Work Committee experienced a ransomware attack on November 12, 2023. An unknown third party exploited a vulnerability in a public-facing forum to gain remote access, deploy ransomware, and exfiltrate limited data. The incident affected 2 New Hampshire residents. The organization shut down its network, retained forensic experts, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 40 days

Nov 12, 2023

Discovered

Dec 22, 2023

Filed

vs. sector median

14 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_03d1f27b9e17b1ab2024-01-17 · +26dVerified
Maine State AGbd_f5de8f7f52de66ae2024-01-22 · +31dCandidate

Name: The National Right to Work Committee
norm: the national right to work committee

Name: The National Right to Work Committee
norm: the national right to work committee
Industry: Professional Servicesllm

Discovered: Nov 12, 2023
Materiality determined: —
Notification sent: Dec 22, 2023
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Shut down the network to halt the progress of the attack and lock down the network
Retained outside cyber security experts to investigate the incident
Notified and is working with law enforcement on this incident
Providing access to free credit monitoring services to employees whose personal information either was or potentially was affected
Changes made: Put in place security measures to strengthen its network against similar incidents in the future
Evaluating procedures with respect to data that we maintain on our servers
Reviewing security policies for any potential updates
Revisiting cybersecurity standards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGDec 22 · first · this page

Indiana State AG+26d

Maine State AG+31d

Pattern: first filing Dec 22 (NH), last Jan 22 (ME) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/national-right-work-committee-20231222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 22, 2023
Raw hash: 5d577fbfbe3d1a7915853a72477707f27291643ce814e9c34d9cc6080c170df2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe National Right to Work Committee

Victim entityThe National Right to Work Committee

Incidentdiscovered Nov 12, 2023

Stated responseShut down the network to halt the progress of the attack and lock down the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov