MalwareRansomwareAkiraData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Quality Carton and Converting
bd_cf918dd4580ebd32 · schema v1 · pii pii-v1
Full breach record for Quality Carton and Converting →Quality Carton & Converting, LLC, a New Hampshire-based manufacturer, reported a ransomware incident involving the Akira group. Discovered on February 10, 2026, the breach resulted in the exfiltration of employee and client PII, including SSNs and financial account data. Approximately 29 New Hampshire residents were affected. QCC engaged forensic specialists, notified law enforcement, and provided 24 months of credit monitoring via Experian. The incident status is contained.
Leak gap clock✗ Leak >180d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed29 affectedView incident
A leak claim by akira about this victim predates this filing by 445 days.View originating leak claim
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/quality-carton-converting-20260430.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 30, 2026
- Raw hash
- 7bb36c962ea622789305ecda9533b497a9dc5ddefd99c2e64f71ff908bd30265
Reporting entity
- Name
- MCLANE MIDDLETON, PROFESSIONAL ASSOCIATIONnorm: mclane middleton professional
Victim entity
- Name
- Quality Carton and Convertingnorm: quality carton and converting
- Domain
- qccma.com
- Industry
- manufacturing
Incident
- Discovered
- Feb 10, 2026
- Materiality determined
- —
- Notification sent
- Apr 29, 2026
- Affected individuals
- 29
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware· Akira
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- AkiraExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
Compliance
- Time to disclose
- 11 weeks(79 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.