HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

MULTI-COLOR CORPORATION

bd_ce060c18142b3699 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 29, 2022

Filed

Oct 28, 2022

To disclose

29 days

Affected

21state residents only

Linked

4 filings

Confidence

67%

Full breach record for MULTI-COLOR CORPORATION →2 incidents on file

Multi-Color Corporation notified the New Hampshire Attorney General of a cybersecurity incident discovered on September 29, 2022, affecting at least 21 NH residents. Unauthorized third-party access compromised employee personnel files, including SSNs, driver's licenses, DOBs, and financial/health data. MCC engaged the FBI and forensic experts, contained the threat, and provided 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Sep 29, 2022

Discovered

Oct 28, 2022

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_03b2125705f30ee42022-10-29 · +1dVerified
Massachusetts State AGbd_7152e5ec374c3a722022-10-29 · +1dVerified
Indiana State AGbd_6a669c7f60ac4c922022-10-26 · +2dVerified

Name: Thompson Hine LLP
norm: thompson hine

Name: MULTI-COLOR CORPORATION
norm: multi color
Industry: Manufacturingllm

Discovered: Sep 29, 2022
Materiality determined: —
Notification sent: Oct 26, 2022
Affected individuals: 21state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified the Federal Bureau of InvestigationFiled incident reports with certain state regulatory authorities
Initial access: valid_credentials

During the incident: Deployed security measures to contain and mitigate the threat
Retained an external incident response team
Engaged leading security experts to further investigate the matter
Proactively engaged the Federal Bureau of Investigation
Established a dedicated call support line and website
Changes made: Offered each impacted individual complimentary credit monitoring services for two (2) years through Equifax
Continues to analyze the incident and its information security programs with ongoing guidance from independent third-party IT security consultants
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 26 · first

New Hampshire State AG+2d · this page

California State AG+3d

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/multi-color-corporation-20221028.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 28, 2022
Raw hash: dec3e798efe500ab087f9fcadd0b0bd1b1d0c59fca5f7667ee4908d57a22a1ff

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThompson Hine LLP

Victim entityMULTI-COLOR CORPORATION

Incidentdiscovered Sep 29, 2022

Stated responseDeployed security measures to contain and mitigate the threat

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov