MalwareTechnologyHealthcareInformationRansomwareData EncryptedCustomer Data InvolvedPHIHealth (basic)PIIIdentity (basic)LowContained

ESO Solutions, Inc.

bd_c4bb84100b37655f · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 28, 2023

Filed

Apr 15, 2024

To disclose

29 weeks

Affected

520state residents only

Linked

3 filings

Confidence

66%

Full breach record for ESO Solutions, Inc. →3 incidents on file

ESO Solutions, Inc. notified the New Hampshire Attorney General of a ransomware incident detected on September 28, 2023. The attack encrypted systems and compromised PHI and PII of approximately 520 New Hampshire residents. ESO engaged forensic investigators, restored systems from backups, and notified the FBI and HHS OCR. Notifications to individuals began December 12, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 weeks / 200 days

Sep 28, 2023

Discovered

Apr 15, 2024

Filed

vs. sector median

+10 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

South Carolina State AGbd_a9f59eb40aa01ff52024-04-09 · +6dCandidate
Maine State AGbd_e9eeb2f06070791f2024-04-09 · +6dVerified

Name: ESO Solutions, Inc.
norm: eso solutions
Domain: eso.com

Name: ESO Solutions, Inc.
norm: eso solutions
Domain: eso.com
Industry: TechnologyllmHealthcarellm

Discovered: Sep 28, 2023
Materiality determined: —
Notification sent: Dec 12, 2023
Affected individuals: 520state-resident count only
Data types: PHIHealth (basic)PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation (FBI)Notified the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR)Notified certain state Attorneys GeneralNotified consumer reporting agencies

During the incident: Took affected systems offline
Secured its network environment
Engaged third-party forensic specialists to assist with investigating the extent of any unauthorized activity
Safely restored its systems and operations via viable backups
Notified the Federal Bureau of Investigation (FBI)
Offered complimentary identity monitoring through Kroll
Changes made: Implemented measures to confirm the security of its systems
Continuing to build on substantial investments in cybersecurity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(200 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

South Carolina State AGApr 9 · first

Maine State AGApr 9 · first

New Hampshire State AG+6d · this page

Pattern: first filing Apr 9 (SC), last Apr 15 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/eso-solutions-20240415.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2024
Raw hash: 6b4fb90b54435db08e2f2193eb34cfa9a4a71805474373512b69165016816e9f

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityESO Solutions, Inc.

Victim entityESO Solutions, Inc.

Incidentdiscovered Sep 28, 2023

Stated responseTook affected systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov