MalwareRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
carlysle.net
bd_ccceb44ab78b843d · schema v1 · pii pii-v1
Full breach record for carlysle.net →Carlysle Engineering, Inc. notified the New Hampshire Attorney General of a ransomware attack discovered on March 23, 2026. The incident affected approximately 6 New Hampshire residents, exposing employee PII including SSNs and driver's licenses. Carlysle engaged OCD Tech for forensic investigation and containment, updated firewalls, and offered 24 months of identity protection services to affected individuals.
Leak gap clock⏱ Leak >30d7 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by payload about this victim predates this filing by 48 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_319e88349b2befceLeak Sitepayloadfiled 2026-03-26(48d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/carlysle-engineering-20260514.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 14, 2026
- Raw hash
- 49e5b62f5320eacaef2b5bc48501d053acf4e568583e7f650273eaf081f0942a
Reporting entity
- Name
- carlysle.netnorm: carlyslenet
- Domain
- carlysle.net
Victim entity
- Name
- carlysle.netnorm: carlyslenet
- Domain
- carlysle.net
Incident
- Discovered
- Mar 23, 2026
- Materiality determined
- —
- Notification sent
- May 14, 2026
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.