HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

SEACOR HOLDINGS INC.

bd_d4a72d456fa4262e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 11, 2022

Filed

Dec 9, 2022

To disclose

8 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for SEACOR HOLDINGS INC. →

SEACOR Holdings Inc. notified the NH Attorney General of a cybersecurity incident where an unauthorized actor accessed server folders between Aug 31 and Sep 3, 2022. The breach affected one NH resident's name, SSN, and/or driver's license. SEACOR engaged a cybersecurity firm, contained the incident, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 41 days

discovery → filing · 8 weeks / 59 days

Aug 31, 2022

Begins

Oct 11, 2022

Discovered

Nov 10, 2022

Scope determined

Dec 9, 2022

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_15c78f7ba05567a52022-12-09Verified
Vermont State AGbd_a0994b551b5a0ca72023-01-12 · +34dVerified
Maine State AGbd_f511e70d439343382023-01-12 · +34dCandidate

Name: SEACOR HOLDINGS INC.
norm: seacor holdings

Name: SEACOR HOLDINGS INC.
norm: seacor holdings
Industry: Transportation & Logisticsllm

Discovered: Oct 11, 2022
Breach occurred: Aug 31, 2022 – Sep 3, 2022
Undetected for: 41 daysoccurrence → discovery
Materiality determined: Nov 10, 2022
Notification sent: Dec 9, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Implemented its incident response plan
Took steps to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Conducted a careful review of the files in those folders
Established a dedicated, toll-free call center
Changes made: Completed implementation of an enhanced security tool
Look for additional opportunities to strengthen existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGDec 9 · first

New Hampshire State AGDec 9 · first · this page

Vermont State AG+34d

Maine State AG+34d

Pattern: first filing Dec 9 (MA), last Jan 12 (ME) — a 34-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/seacor-holdings-20221209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 9, 2022
Raw hash: 77ea92d6d15055c026613097eb97e2c053b86d0b37cd35351fec9cba7c4d8ff2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySEACOR HOLDINGS INC.

Victim entitySEACOR HOLDINGS INC.

Incidentdiscovered Oct 11, 2022

Stated responseImplemented its incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov