MalwareManufacturingManufacturingEmployee Data InvolvedData ExfiltratedIdentity (basic)Government IDEmploymentMediumContained

CAMPARI AMERICA LLC

bd_d13377b37bc6f000 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 1, 2020

Filed

Dec 18, 2020

To disclose

7 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for CAMPARI AMERICA LLC →

Campari America disclosed a malware attack on or about November 1, 2020, affecting approximately one New Hampshire resident employee. The attacker accessed parts of the Campari Group network, exposing employee directory information (name, email, job title, phone) and Social Security Numbers. The incident was contained, and the company notified affected individuals on November 12, 2020, offering two years of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 47 days

Nov 1, 2020

Begins

Nov 1, 2020

Discovered

Dec 18, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_5798af31d614888d2020-12-17 · +1dCandidate
Indiana State AGbd_835ad500479c20392020-11-12 · +36dVerified

Name: Campari America
norm: campari america
Domain: camparigroup.com

Name: CAMPARI AMERICA LLC
norm: campari america
Domain: camparigroup.com
Industry: Manufacturingllm

Discovered: Nov 1, 2020
Breach occurred: Nov 1, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 12, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported to Italian cyber policeReported to Italian Data Protection AuthorityReported to United States FBINotified New Hampshire Department of Justice

During the incident: IT team and external consultants cut off the threat actor’s access quickly
Working hard at recovery of systems and files
Reported the incident to law enforcement, including the Italian cyber police, the Italian Data Protection Authority, and the United States FBI
Collaborating with law enforcement in their investigations
Retained Experian to provide two years of identity protection services, including credit monitoring, free of charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(47 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGNov 12 · first

Maine State AG+35d

New Hampshire State AG+36d · this page

Pattern: first filing Nov 12 (IN), last Dec 18 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/campari-america-20201218.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2020
Raw hash: ba6648052ba827240f4ad9629d6256f0ae04b3c13b1b9f0ab1e3f48efc4485d8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCampari America

Victim entityCAMPARI AMERICA LLC

Incidentdiscovered Nov 1, 2020

Stated responseIT team and external consultants cut off the threat actor’s access quickly

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov