MalwareFinancial ServicesFinanceRansomwareData EncryptedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

TIC International Corporation

bd_b06b9313671f580c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 15, 2022

To disclose

—

Affected

42state residents only

Linked

9 filings

Confidence

66%

Full breach record for TIC International Corporation →

TIC International Corporation experienced a ransomware attack on March 30, 2022, resulting in the unauthorized acquisition of personal information, including names and Social Security numbers. The incident affected 42 New Hampshire residents. TIC engaged forensic investigators, contained the incident, and notified affected individuals on September 6, 2022, offering credit monitoring and identity theft protection services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Mar 30, 2022

Begins

Sep 15, 2022

Filed

This filing is one of 9 about the same incident.View merged incident

A leak claim by conti about this victim predates this filing by 156 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_6c63307e88505c372022-04-12 · +156dVerified by operator

Regulatory filings (7) · sorted by filing gap

Massachusetts State AGbd_4fdd9352ee9421db2022-09-10 · +5dCandidate
Montana State AGbd_68671e9f5aba8b942022-09-09 · +6dVerified
Maine State AGbd_ce964ffee442741b2022-09-09 · +6dVerified
Oregon State AGbd_e7cbbe892f19d6e92022-09-09 · +6dVerified

Show 3 more filings ↓up to 48d gap

Indiana State AGbd_c26b950225a9c8972022-09-06 · +9dVerified by operator
HHS OCRbd_116adce54f9888ea2022-11-01 · +47dVerified by operator
California State AGbd_fdb0185e648d75f42022-11-02 · +48dVerified

Name: TIC International Corporation
norm: tic international
Domain: ticintl.com

Name: TIC International Corporation
norm: tic international
Domain: ticintl.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Mar 30, 2022
Materiality determined: —
Notification sent: Sep 6, 2022
Affected individuals: 42state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Office of the Attorney General of New HampshireReported the matter to the Federal Bureau of Investigation

During the incident: Engaged a digital forensics firm to assist with their response
Engaged an independent data review team to conduct an extensive review of potentially affected files
Implemented measures to enhance the security of its network
Reported the matter to the Federal Bureau of Investigation
Offering affected residents twelve (12) months of credit and identity monitoring
Providing a $1,000,000 identity theft insurance reimbursement policy
Providing fully managed identity theft recovery services
Providing, through Kroll, a fully staffed call center to answer questions and provide support
Changes made: Implemented measures to enhance the security of its network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 7 states

View merged incident ↗

Indiana State AGSep 6 · first

Montana State AG+3d

Maine State AG+3d

Oregon State AG+3d

Massachusetts State AG+4d

New Hampshire State AG+9d · this page

HHS OCR+56d

California State AG+57d

Pattern: first filing Sep 6 (IN), last Nov 2 (CA) — a 57-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tic-international-20220915.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2022
Raw hash: dcb0a67286c78042abb0de4dd4143d22b0554012a9fd17dde9234b70e40a6fd8

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityTIC International Corporation

Victim entityTIC International Corporation

IncidentRansomware

Stated responseEngaged a digital forensics firm to assist with their response

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov