New England Development
bd_ccb10cd3d061673f · schema v1 · pii pii-v1
Full breach record for New England Development →New England Development (NED), a real estate development and management company, notified the New Hampshire Attorney General on November 6, 2020, of a ransomware attack discovered on October 3, 2020. The attack involved the NetWalker ransomware group. Approximately 115 New Hampshire residents (current/former employees and contractors) were potentially affected. While the attacker was on the network for ~10 hours and exfiltrated 16 files, NED determined these did not contain PII. However, in an abundance of caution, NED is notifying individuals whose data (including SSNs) may have been on the network. NED engaged Coretelligent and Arete Advisors for forensic investigation, restored systems from backups, reported to the FBI, and offers 2 years of credit monitoring.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_24fc18e2d321c4d8Maine State AGfiled 2020-11-06Candidate
- bd_89c02262be36da96Montana State AGfiled 2020-12-09(33d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-england-development-20201106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2020
- Raw hash
- 0135c0f2d1dc6dc0653ea909820655707432a466e5100055131a2a8c2ed39da0
Reporting entity
- Name
- Goulston & Storrsnorm: goulston storrs
- Domain
- goulstonstorrs.com
Victim entity
- Name
- New England Developmentnorm: new england development
Incident
- Discovered
- Oct 3, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 115
- Data types
- IDENTITY_GOVERNMENTPII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- NetWalkerExternalFinancial
- Regulator citations
- Reported the incident to the FBI
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.