HackingManufacturingManufacturingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Green Diamond Resource Company

bd_c1c51d186d07b1d5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 27, 2023

Filed

Apr 19, 2024

To disclose

42 weeks

Affected

135state residents only

Linked

11 filings

Confidence

66%

Full breach record for Green Diamond Resource Company →

Green Diamond Resource Company notified New Hampshire residents on April 19, 2024, of a security incident occurring between June 26-27, 2023. An unknown actor gained access to the network, potentially exposing personal information including names, addresses, and Social Security numbers. 135 NH residents were notified. The company engaged the FBI, deployed threat monitoring, and provided 24 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d42 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 42 weeks / 297 days

Jun 26, 2023

Begins

Jun 27, 2023

Discovered

Apr 19, 2024

Filed

vs. sector median

+32 wks slower

This filing is one of 11 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 284 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_c80d7b45e85dbf892023-07-10 · +284dVerified by operator

Regulatory filings (9) · sorted by filing gap

HHS OCRbd_53c799f0b10cfd0a2024-04-19Verified by operator
Massachusetts State AGbd_5c434b39c6ae584d2024-04-19Verified by operator
Oregon State AGbd_694f98915dcd2dac2024-04-19Verified by operator
Washington State AGbd_7b23d50bf8814e482024-04-19Verified by operator

Show 5 more filings ↓

Maine State AGbd_8bce8b6f7748ef422024-04-19Verified
Vermont State AGbd_a39d9bdd6ac5dea62024-04-19Verified by operator
Indiana State AGbd_b17f3b29db9791372024-04-19Verified by operator
California State AGbd_cc743e6bb046ac2f2024-04-19Verified by operator
Montana State AGbd_d6d44811063c84b82024-04-19Verified by operator

Name: Green Diamond Resource Company
norm: green diamond resource

Name: Green Diamond Resource Company
norm: green diamond resource
Industry: Manufacturingllm

Discovered: Jun 27, 2023
Breach occurred: Jun 26, 2023 – Jun 27, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 19, 2024
Affected individuals: 135state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBI regarding the eventProvided written notice of this incident to relevant state and federal regulatorsProvided written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Initial access: valid_credentials

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of Green Diamond systems
Identified potentially affected individuals
Notified the FBI regarding the event
Implemented additional safeguards and training to its employees
Provided access to credit monitoring services for 24 months through Transunion
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided information on how to place a fraud alert and security freeze on one’s credit file
Provided contact details for the national consumer reporting agencies
Provided information on how to obtain a free credit report
Encouraged individuals to contact the Federal Trade Commission, their state Attorney General, and law enforcement
Provided written notice of this incident to relevant state and federal regulators
Provided written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Deployed an advanced threat protection and monitoring tool
Reviewed existing security policies
Implemented additional cybersecurity measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(297 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 9 states

View merged incident ↗

HHS OCRApr 19 · first

Massachusetts State AGApr 19 · first

Oregon State AGApr 19 · first

Washington State AGApr 19 · first

Maine State AGApr 19 · first

Vermont State AGApr 19 · first

Indiana State AGApr 19 · first

California State AGApr 19 · first

Montana State AGApr 19 · first

New Hampshire State AGApr 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/green-diamond-resource-20240419.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 19, 2024
Raw hash: 0d1c382a07bd49f27d471219bd6ca040901ba7a6067fe8171d8cef3476ee182d

Linked disclosures

Ransomware claims (1)

Regulatory filings (9) · sorted by filing gap

Reporting entityGreen Diamond Resource Company

Victim entityGreen Diamond Resource Company

Incidentdiscovered Jun 27, 2023

Stated responseMoved quickly to investigate and respond to the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov