HackingTechnologyInformationStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Talalay Global, Inc.

bd_b184e571d5a02bb4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 24, 2024

Filed

Jun 18, 2024

To disclose

8 weeks

Affected

1state residents only

Linked

3 records

Confidence

65%

Talalay Global, Inc. notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to its network between April 19 and April 24, 2024. One New Hampshire resident's personal information was compromised. The company engaged an external cybersecurity firm, secured systems, and mailed notification letters offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 8 weeks / 55 days

Apr 19, 2024

Begins

Apr 24, 2024

Discovered

May 31, 2024

Scope determined

Jun 18, 2024

Filed

vs. sector median

3 wks faster

This filing is one of 3 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_f2fcfd8299d6e2442024-04-24 · +55dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_6cdb89c3786ddfea2024-06-18Verified by operator

Name: Talalay Global, Inc.
norm: talalay global
Domain: talalayglobal.com

Name: Talalay Global, Inc.
norm: talalay global
Domain: talalayglobal.com
Industry: Technologyllm

Discovered: Apr 24, 2024
Breach occurred: Apr 19, 2024 – Apr 24, 2024
Undetected for: 5 daysoccurrence → discovery
Materiality determined: May 31, 2024
Notification sent: Jun 18, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Secured the systems involved
Commenced an investigation with assistance from an external cybersecurity firm
Mailed a notification letter via U.S. First-Class mail
Offering complimentary credit monitoring, fraud consultation, and identity theft restoration services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(55 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 18 · first

New Hampshire State AGJun 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/talalay-global-20240618.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2024
Raw hash: b94669a9f44c01b73c635ae9fc29c27b1d221e2f3c207bd302c8dadc240104b5

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityTalalay Global, Inc.

Victim entityTalalay Global, Inc.

Incidentdiscovered Apr 24, 2024

Stated responseSecured the systems involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov