MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedDelayed DiscoveryPIIIdentity (basic)LowActive

ARPIN INTERNATIONAL GROUP, INC.

bd_b53fe998f5728121 · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 14, 2023

Filed

Aug 14, 2023

To disclose

17 weeks

Affected

8state residents only

Linked

3 filings

Confidence

66%

Full breach record for ARPIN INTERNATIONAL GROUP, INC. →4 incidents on file

Arpin International Group, Inc. filed a supplemental data breach notification with the New Hampshire Attorney General on August 10, 2023, regarding a ransomware attack discovered on April 14, 2023. The incident involved unauthorized access to files containing employee and client PII. 8 New Hampshire residents were identified as affected. AIG engaged forensic specialists, notified law enforcement, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 122 days

Apr 14, 2023

Discovered

Aug 14, 2023

Filed

vs. sector median

on median

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_252e6a097c24e7bb2023-09-18 · +35dVerified
New Hampshire State AGbd_df4dcd537ff93db42023-10-10 · +57dVerified

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: ARPIN INTERNATIONAL GROUP, INC.
norm: arpin international
Industry: Professional Servicesllm

Discovered: Apr 14, 2023
Materiality determined: —
Notification sent: Aug 10, 2023
Affected individuals: 8state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to federal law enforcementSupplement notice to New Hampshire Office of Attorney General

During the incident: Began working with its I.T. team and third-party forensic specialists to investigate the full nature and scope of the incident
Reported this incident to federal law enforcement
Undertook a comprehensive and time-intensive process to identify the information that may have been contained within the potentially impacted files
Engaged third-party forensic specialists to investigate this matter
Arranged for you to activate, at no cost to you, an online credit and identity monitoring service for provided by IDX, a ZeroFox Company
Changes made: Arranged for you to activate, at no cost to you, an online credit and identity monitoring service for provided by IDX, a ZeroFox Company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(122 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 14 · first · this page

Vermont State AG+35d

New Hampshire State AG+57d

Pattern: first filing Aug 14 (NH), last Oct 10 (NH) — a 57-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/arpin-international-group-20230814.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 14, 2023
Raw hash: 2b4d91d1ab88fa2e34d4c343481723f79020a12ee1c336a77e01e87f1564177c

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCipriani & Werner

Victim entityARPIN INTERNATIONAL GROUP, INC.

Incidentdiscovered Apr 14, 2023

Stated responseBegan working with its I.T. team and third-party forensic specialists to investigate the full nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov