MalwareProfessional ServicesProfessional ServicesRansomwareFilecoder CrData EncryptedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

BJL Cleaning Corporation

bd_b4d9fb750ed83076 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 10, 2015

Filed

May 1, 2015

To disclose

21 days

Affected · nationwide

641 in this filing

Confidence

65%

Full breach record for BJL Cleaning Corporation →

BJL Cleaning Corporation d/b/a Champion Cleaning notified the NH Attorney General that a computer virus (FileCoder.CR Trojan) infiltrated its server on April 10, 2015, encrypting files containing the names and Social Security numbers of 64 employees, including one New Hampshire resident. The company recovered the files and enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 days

Apr 10, 2015

Begins

Apr 10, 2015

Discovered

May 1, 2015

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed64 affectedView incident

Name: BJL Cleaning Corporation
norm: bjl cleaning
Domain: championcleaning.com

Name: BJL Cleaning Corporation
norm: bjl cleaning
Domain: championcleaning.com
Also named: BJL Cleaning Corporationdba oflegal entity
Champion Cleaningdba oftrade name
Industry: Professional Servicesllm

Discovered: Apr 10, 2015
Breach occurred: Apr 10, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 1, 2015
Affected individuals: 64state + nationwide
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General

During the incident: Recovered the encrypted files
Removed files containing personal information from its server
Enhanced its anti-virus and anti-hacking security measures
Changes made: Removed files containing personal information from its server
Enhanced its anti-virus and anti-hacking security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bjl-cleaning-20150501.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 1, 2015
Raw hash: 577ca624051252d9291d21e72a9dca42f6109c255dff91cac263281d6b3d2301

Reporting entityBJL Cleaning Corporation

Victim entityBJL Cleaning Corporation

Incidentdiscovered Apr 10, 2015

Stated responseRecovered the encrypted files

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov