HackingGovernmentGovernmentStolen CredentialsCustomer Data InvolvedPCIFinancial accountLowResolved

NH Liquor Commission

bd_b2b2ce1cf90c3d3b · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 6, 2021

Filed

Apr 7, 2021

To disclose

≤1 day

Affected

Not disclosed

Confidence

66%

Full breach record for NH Liquor Commission →

The NH Liquor Commission detected fraudulent credit card transactions on its online licensee system on April 6, 2021. The activity, originating from an IP address in Ukraine, involved small-dollar test transactions ($2-$3) likely intended to validate stolen card numbers. No system access was gained, and the application remained online. The Commission flagged the transactions, contacted affected licensees and the payment vendor (Chase), and notified state leadership. Geo-blocking is being considered as a remediation measure.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · ≤1 day / 1 days

Apr 6, 2021

Begins

Apr 6, 2021

Discovered

Apr 7, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: NH Liquor Commission
norm: nh liquor commission
Domain: liquor.nh.gov

Name: NH Liquor Commission
norm: nh liquor commission
Domain: liquor.nh.gov
Industry: Governmentllm

Discovered: Apr 6, 2021
Breach occurred: Apr 6, 2021 – Apr 6, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PCIFinancial account
Attack vector: Unknown
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Flagged fraudulent credit card transactions
Contacted Licensee account holders
Contacted payment card vendor (Chase)
Notified state leadership
Changes made: Consider implementing geo-blocking of foreign HTTPS/HTTP access to the ice.liquor.nh.gov website
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nh-liquor-commission-20210407.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 7, 2021
Raw hash: 640a121b53251e7b96b1c12b9900bbf2017602f94149e0b0f796047cb8744906

Reporting entityNH Liquor Commission

Victim entityNH Liquor Commission

Incidentdiscovered Apr 6, 2021

Stated responseFlagged fraudulent credit card transactions

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov