MalwareTechnologyInformationRansomwareData EncryptedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDMediumContained

Cocoon, Inc.

bd_aef023f4861cfd9b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 27, 2024

Filed

Apr 16, 2024

To disclose

20 days

Affected

25state residents only

Linked

3 filings

Confidence

66%

Full breach record for Cocoon, Inc. →3 incidents on file

Cocoon Inc. notified the New Hampshire Attorney General of a ransomware incident involving a network vendor. Unauthorized access occurred March 3-7, 2024, encrypting systems. Cocoon identified 25 NH residents' personal information (names, government IDs) was accessed. Notifications were mailed starting April 11, 2024, offering credit monitoring. Cocoon engaged cybersecurity professionals and enhanced security protocols.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 24 days

discovery → filing · 20 days

Mar 3, 2024

Begins

Mar 27, 2024

Discovered

Apr 16, 2024

Filed

vs. sector median

16 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_8de020024d6a87a82024-04-16Candidate
Massachusetts State AGbd_73ad82b915f115dc2024-04-17 · +1dVerified

Name: Cocoon, Inc.
norm: cocoon
Domain: cocoon-inc.com

Name: Cocoon, Inc.
norm: cocoon
Domain: cocoon-inc.com
Industry: Technologyllm

Discovered: Mar 27, 2024
Breach occurred: Mar 3, 2024 – Mar 7, 2024
Undetected for: 24 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 11, 2024
Affected individuals: 25state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella
Initial access: supply_chain

During the incident: Engaged a cybersecurity firm
Launched an investigation
Restored systems
Reviewed potentially accessed files
Identified files containing personal information
Identified addresses for affected individuals
Began mailing and hand delivering notification letters to New Hampshire residents
Provided a telephone number for notified individuals
Offered complimentary membership to credit monitoring and identity protection services
Changes made: Implemented additional measures to enhance existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGApr 16 · first

New Hampshire State AGApr 16 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cocoon-20240416.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2024
Raw hash: 380afa4cec5c70e92fac5cc03fa23e56543b1d4070a78b6b7609ee18dc2af219

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCocoon, Inc.

Victim entityCocoon, Inc.

Incidentdiscovered Mar 27, 2024

Stated responseEngaged a cybersecurity firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov