DisclosureLens
MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedData ExfiltratedEmployee Data InvolvedRansom DemandedIdentity (basic)Government IDEmploymentMediumContained

Carlysle Engineering, Inc.

bd_ccceb44ab78b843d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 23, 2026

Filed

May 14, 2026

To disclose

7 weeks

Affected

6state residents only

Linked

4 filings

Confidence

66%
Full breach record for Carlysle Engineering, Inc.

Carlysle Engineering, Inc. experienced a ransomware attack on March 23, 2026, affecting its primary file server. The attacker encrypted files and exfiltrated data, including human resources records containing names, addresses, dates of birth, Social Security Numbers, and driver's license numbers. Approximately six New Hampshire residents were affected. The company engaged OCD Tech for investigation and containment, which was completed on the day of discovery. Carlysle is offering 24 months of identity theft protection through IDX.

Leak gap clock Leak >30d7 weeks discovery → filing

Incident timeline

discovery → filing · 7 weeks / 52 days

Mar 23, 2026

Begins

Mar 23, 2026

Discovered

May 14, 2026

Filed

vs. sector median

10 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Maine State AGMay 14 · first
Massachusetts State AGMay 14 · first
New Hampshire State AGMay 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.