HackingGovernmentGovernmentStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowActive

Northern Middlesex Regional Emergency Communication Center

bd_b0cb4319cdc1a638 · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 21, 2023

Filed

Jan 31, 2024

To disclose

6 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Northern Middlesex Regional Emergency Communication Center →

Northern Middlesex Regional Emergency Communication Center (NMRECC) notified the NH Attorney General of a data security incident detected on December 21, 2023. An unauthorized third party accessed emails containing personal information. NMRECC engaged forensic specialists, disabled accounts, and offered credit monitoring services. The investigation was ongoing as of the January 31, 2024 filing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 41 days

Dec 21, 2023

Discovered

Jan 16, 2024

Scope determined

Jan 31, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Northern Middlesex Regional Emergency Communication Center
norm: northern middlesex regional emergency communication center

Name: Northern Middlesex Regional Emergency Communication Center
norm: northern middlesex regional emergency communication center
Industry: Governmentllm

Discovered: Dec 21, 2023
Materiality determined: Jan 16, 2024
Notification sent: Jan 31, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John M. Formella
Initial access: valid_credentials

During the incident: Engaged a law firm specializing in cybersecurity and data privacy to investigate further
Engaged third-party forensic specialists to assist NMRECC in its analysis of any unauthorized activity
Disabled all relevant accounts
Worked with third-party specialists to confirm the security of our environment
Provided access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Provided proactive fraud assistance through Cyberscout through Identity Force
Changes made: Disabled all relevant accounts
Worked with third-party specialists to confirm the security of our environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/north-middlesex-region-emergency-comm-center-20240131.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 31, 2024
Raw hash: 2d2fcd53221d46f23def2e200e7caf5c441e6d0d103354b288c810290154f09d

Reporting entityNorthern Middlesex Regional Emergency Communication Center

Victim entityNorthern Middlesex Regional Emergency Communication Center

Incidentdiscovered Dec 21, 2023

Stated responseEngaged a law firm specializing in cybersecurity and data privacy to investigate further

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov