MalwareProfessional ServicesProfessional ServicesRansomwareCL0PData ExfiltratedRansom DemandedCustomer Data InvolvedPIILowContained

Delphinus Engineering

bd_b3d7b5e65594463c · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 10, 2024

To disclose

—

Affected

14state residents only

Linked

5 filings

Confidence

67%

Full breach record for Delphinus Engineering →

Delphinus Engineering, Inc. experienced a CL0P ransomware attack affecting its network. Unauthorized access to personal information of 14 New Hampshire residents occurred as early as mid-October 2023. The company shut down systems, engaged forensic specialists, and notified the FBI. Affected individuals are offered credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Oct 15, 2023

Begins

Apr 10, 2024

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecl0pbd_d980d8c17ac51fca2024-01-01 · +99dVerified

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_03f9ee8c8af817be2024-04-10Candidate
Indiana State AGbd_7bb74435197eb8fe2024-04-10Verified
Massachusetts State AGbd_d0544ae773a49c192024-04-12 · +2dVerified by operator

Name: Delphinus Engineering
norm: delphinus engineering
Domain: delphinus.com

Name: Delphinus Engineering
norm: delphinus engineering
Domain: delphinus.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Oct 15, 2023
Materiality determined: —
Notification sent: Apr 10, 2024
Affected individuals: 14state-resident count only
Data types: PII
Attack vector: Ransomware· CL0P
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: CL0PExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralNotified Federal Bureau of Investigation (FBI)

During the incident: Shut down its network and systems
Engaged industry-leading specialists in cybersecurity and forensic investigations
Notified law enforcement
Assisting the Federal Bureau of Investigation (FBI) in its investigation
Installed monitoring devices to detect any suspicious activity
Providing complimentary credit protection and monitoring services through Experian
Changes made: Working to implement additional safeguards
Evaluate and deploy robust security protocols
Continuous monitoring
Staff training
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGApr 10 · first

Indiana State AGApr 10 · first

New Hampshire State AGApr 10 · first · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/delphinus-engineering-20240410.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2024
Raw hash: 904d925ccd3a648f100d8795f9e7aff0d6e6556607ffb2b0db0469d54afb6bcf

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityDelphinus Engineering

Victim entityDelphinus Engineering

IncidentRansomware

Stated responseShut down its network and systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov