MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
ORDER EXPRESS, INC.
bd_d08c7863f9eb437f · schema v1 · pii pii-v1
Full breach record for ORDER EXPRESS, INC. →Order Express, Inc. reported a ransomware attack discovered on September 7, 2022, involving unauthorized network access between July 29 and September 7, 2022. The incident impacted 3 New Hampshire residents, exposing names, driver's license numbers, and SSNs/TINs/ EINs. Order Express engaged third-party specialists, reset passwords, deployed EDR, and offered 12 months of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5a8e6539ed1675b9California State AGfiled 2022-12-15Candidate
- bd_87f8977af6ebf822Montana State AGfiled 2022-12-15Verified
- bd_c83602842b9c091eMaine State AGfiled 2022-12-15Candidate
- bd_f03dcb3257aa924fWashington State AGfiled 2022-12-15Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/order-express-20221215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2022
- Raw hash
- 8dcdea3418a636b51f813e8c42fe96dda7da1a872413874308df2afe31495da1
Reporting entity
- Name
- ORDER EXPRESS, INC.norm: order express
Victim entity
- Name
- ORDER EXPRESS, INC.norm: order express
Incident
- Discovered
- Sep 7, 2022
- Materiality determined
- Nov 18, 2022
- Notification sent
- Dec 15, 2022
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.