MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedIDENTITY_GOVERNMENTPIIHighContained
OHL North America
bd_cb35e2db690fd77c · schema v1 · pii pii-v1
Full breach record for OHL North America →OHL North America experienced a ransomware attack between March 18 and April 8, 2021. The company prevented file encryption but confirmed that certain files were exfiltrated. The breach affected 7,756 individuals, including one Maine resident, compromising names and Social Security Numbers. OHL notified affected individuals on May 4, 2021, and offered 24 months of credit monitoring and identity theft protection through Experian.
Maine clockDiscovered Apr 13, 2021 → Filed with AG May 3, 202120d ✓ ME AG ≤30d20 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_91153bd854427ec7California State AGfiled 2021-05-03Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0eeedd98-8a6a-4cc1-8923-4d765a830c67.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 3, 2021
- Raw hash
- 6b4bc1a63bd4ec5cf65905e7cd8dca943afa983b37ce69b47764d796e824590c
Reporting entity
- Name
- OHL North Americanorm: ohl north america
Victim entity
- Name
- OHL North Americanorm: ohl north america
Incident
- Discovered
- Apr 13, 2021
- Materiality determined
- —
- Notification sent
- May 4, 2021
- Affected individuals
- 7,756
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 20d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 13, 2021→ Filed with AG: May 3, 202120d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.