MalwareRansomwareVulnerability ExploitCapture Stored DataAkiraData ExfiltratedData EncryptedTargetedActor NamedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
WCAS MANAGEMENT CORPORATION
bd_c2bdf578840cee33 · schema v1 · pii pii-v1
Full breach record for WCAS MANAGEMENT CORPORATION →WCAS Management, L.P. notified the NH Attorney General of a ransomware attack by the Akira group. The incident occurred July 31-Aug 1, 2025, exploiting a SonicWall VPN vulnerability. One NH resident's data (PII, SSN, financial info) was exfiltrated. WCAS isolated systems, engaged forensics, and notified law enforcement. Notifications sent Oct 22, 2025, with 24-month credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7509db280bf0f68aMaine State AGfiled 2025-10-22Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wcas-management-20251022.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 22, 2025
- Raw hash
- 44e261c6809f51d17f0c69ec679b054a8b937ec7c1b1155855a715745491452d
Reporting entity
- Name
- ROPES & GRAY LLPnorm: ropes gray
Victim entity
- Name
- WCAS MANAGEMENT CORPORATIONnorm: wcas management
Incident
- Discovered
- Aug 1, 2025
- Materiality determined
- —
- Notification sent
- Oct 22, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Ransomware· Akira
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1190 Exploit Public-Facing Application
- Threat actor
- AkiraExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.