HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained

Ocean House Management

bd_aed373f060b2d20b · schema v1 · pii pii-v1

Full breach record for Ocean House Management →

Ocean House Management notified the New Hampshire Attorney General of a cybersecurity incident occurring August 15-16, 2021. An unauthorized party accessed computer systems, potentially exposing names, Social Security numbers, and financial/payment card numbers of 17 NH residents. OHM cleaned servers, enhanced monitoring, notified law enforcement, and mailed notifications offering one year of Equifax identity monitoring.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_62c8fc09e106ed37Montana State AGfiled 2022-09-19Candidate
bd_f530f52549984c38Maine State AGfiled 2022-09-19Verified

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ocean-house-management-20220919.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2022
Raw hash: e2fe8cb417b952d1ed04d5578b16e2f19a9aa2d58b394c89c6ee45c74cd2e3b9

Reporting entity

Name: Ocean House Management
norm: ocean house management

Victim entity

Name: Ocean House Management
norm: ocean house management

Incident

Discovered: Aug 16, 2022
Materiality determined: —
Notification sent: Sep 19, 2022
Affected individuals: 17
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: exploit_public_facing

Compliance

Time to disclose: 5 weeks(34 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.