HackingTechnologyManufacturingInformationSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancialMediumActive

Bionik Laboratories Corp.

bd_ca4320b3878194da · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 14, 2020

Filed

May 15, 2020

To disclose

4 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Bionik Laboratories Corp. →

Bionik Laboratories Corp. notified the NH AG of a breach involving its auditor, MNP, LLP. MNP suffered a breach on April 5, 2020. Bionik was notified on April 14, 2020. One NH resident's PII (name, address, DOB, SSN, salary) may have been impacted. Notification sent May 14, 2020. Investigation ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 9 days

discovery → filing · 4 weeks / 31 days

Apr 5, 2020

Begins

Apr 14, 2020

Discovered

May 15, 2020

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_89e1771910cfec782020-05-14 · +1dVerified

Name: Ruskin Moscou Faltischek, P.C.
norm: ruskin moscou faltischek

Name: Bionik Laboratories Corp.
norm: bionik laboratories
Industry: TechnologyllmManufacturingllm

Discovered: Apr 14, 2020
Breach occurred: Apr 5, 2020
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 14, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: Partner
Regulator citations: Notified New Hampshire Attorney General pursuant to N.H. Rev. Stat. Ann. § 359-C:20
Third party: via MNP, LLP
Initial access: supply_chain

During the incident: Corresponding with MNP, LLP to stay updated regarding the investigation
Conducting a forensic investigation to determine the scope of the breach
Evaluating its business relationship with MNP, LLP
Reviewing the policies and procedures the Company has in place regarding vendors
Offering complimentary two-year membership of Experian's IdentityWorks
Changes made: Evaluating its business relationship with MNP, LLP
Reviewing the policies and procedures the Company has in place regarding vendors
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMay 14 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bionik-laboratories-20200515.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 15, 2020
Raw hash: 3b024b16b83319d1afc053821e661b70118fe93c811894fc4a88712aea04d2bd

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRuskin Moscou Faltischek, P.C.

Victim entityBionik Laboratories Corp.

Incidentdiscovered Apr 14, 2020

Stated responseCorresponding with MNP, LLP to stay updated regarding the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov