MalwareManufacturingManufacturingRansomwareData ExfiltratedRansom DemandedData EncryptedTargetedIdentity (basic)EmploymentLowContained

Continental AG

bd_ae3ea6f655cb60d0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 4, 2022

Filed

Aug 24, 2023

To disclose

13 months

Affected

18state residents only

Linked

6 filings

Confidence

66%

Full breach record for Continental AG →

Continental AG notified New Hampshire residents of a cyberattack occurring July 4–August 5, 2022. Hackers gained access, attempted ransomware encryption (averted), and exfiltrated employee data including PII. 18 NH residents affected. FBI notified. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 31 days

discovery → filing · 13 months / 385 days

Jul 4, 2022

Begins

Aug 4, 2022

Discovered

Aug 24, 2023

Filed

vs. sector median

+44 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 294 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_9a67e1924b63f9012022-11-03 · +294dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_1f28c8201f71190e2023-08-23 · +1dVerified by operator
Massachusetts State AGbd_aa99fac47ed47ab52023-08-28 · +4dVerified by operator
Vermont State AGbd_170f8e9c933666b42023-08-15 · +9dVerified
Indiana State AGbd_94bcefd814e9f6b92023-08-15 · +9dVerified

Name: Continental AG
norm: continental
Domain: continental.com

Name: Continental AG
norm: continental
Domain: continental.com
Industry: Manufacturingllm

Discovered: Aug 4, 2022
Breach occurred: Jul 4, 2022 – Aug 5, 2022
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 15, 2023
Affected individuals: 18state-resident count only
Data types: Identity (basic)Employment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Continental reported the incident to law enforcement authorities, including the Federal Bureau of Investigation
Initial access: external_remote_services

During the incident: Continental reported the incident to law enforcement authorities, including the Federal Bureau of Investigation, and is cooperating with their investigation
Continental continues to monitor and assess additional steps to maintain the security that protects its systems
Leading experts, particularly in the fields of cybersecurity and forensics, have been engaged to fully investigate this incident
There is ongoing coordination and close cooperation with domestic and foreign law enforcement authorities
Processes for changing bank and account data have been adapted
Changes made: Technical security measures were taken designed to prevent further access to or encryption of our systems
The dark web is being actively monitored regarding potential publication of the affected data
Providing complimentary credit monitoring services to the affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(385 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGAug 15 · first

Indiana State AGAug 15 · first

Maine State AG+8d

New Hampshire State AG+9d · this page

Massachusetts State AG+13d

Pattern: first filing Aug 15 (VT), last Aug 28 (MA) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/continental-ag-20230824.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 24, 2023
Raw hash: 048542cc2017802e8329f7b2834aeb2d0954ac23b4af74a8ada865eba7e5d66d

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityContinental AG

Victim entityContinental AG

Incidentdiscovered Aug 4, 2022

Stated responseContinental reported the incident to law enforcement authorities, including the Federal Bureau of Investigation, and is cooperating with their investigation

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov