MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICLowContained
Michael T. Gibson P.A.
bd_b0b7778cf5914f29 · schema v1 · pii pii-v1
Full breach record for Michael T. Gibson P.A. →Michael T. Gibson P.A. reported a data breach on August 20, 2024, affecting New Hampshire residents. On July 22, 2024, an unauthorized third party compromised the firm's external IT vendor and subsequently accessed the firm's systems, extracting files potentially containing PII. On July 23, ransomware was deployed, encrypting most of the firm's network. The firm reported the incident to law enforcement and is working with consultants to strengthen security.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_26b3bfd41958177eMaine State AGfiled 2024-08-20Candidate
- bd_72ce601c648a0928Montana State AGfiled 2024-08-20Candidate
- bd_94b0efd01ee67ffbVermont State AGfiled 2024-08-20Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/michael-t-gibson-20240820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2024
- Raw hash
- 800e76c7dc8d3d631f4b033a32aa4ce0f1ffbff59f5a2dc794062cee2fdd93df
Reporting entity
- Name
- Michael T. Gibson P.A.norm: michael t gibson
Victim entity
- Name
- Michael T. Gibson P.A.norm: michael t gibson
Incident
- Discovered
- Jul 22, 2024
- Materiality determined
- —
- Notification sent
- Aug 21, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported incident to New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- supply_chain
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.