MalwareRansomwareData ExfiltratedEMPLOYMENTIDENTITY_BASICLowActive
The Arc of Essex County
bd_d663ef7e8d718ead · schema v1 · pii pii-v1
Full breach record for The Arc of Essex County →The Arc of Essex County detected malware on its network on January 27, 2023. An unauthorized actor accessed files containing employment information and potentially other personal data. The incident affects one New Hampshire resident. The organization is offering one year of credit monitoring and is reviewing security policies. The investigation was ongoing at the time of filing.
Leak gap clock⏱ Leak >30d9 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 53 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_667634452638fcc1Leak Sitedispossessorfiled 2023-02-09(53d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_d8e494c29cd0bc73Vermont State AGfiled 2023-03-28(6d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/arc-essex-county-20230403.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 3, 2023
- Raw hash
- f776f52e750ca81d439e949825b23857f91c4d90306b39d66e07b1fa218ecc9d
Reporting entity
- Name
- The Arc of Essex Countynorm: the arc of essex county
- Domain
- arcessex.org
Victim entity
- Name
- The Arc of Essex Countynorm: the arc of essex county
- Domain
- arcessex.org
Incident
- Discovered
- Jan 27, 2023
- Materiality determined
- —
- Notification sent
- Mar 28, 2023
- Affected individuals
- 1
- Data types
- EMPLOYMENTIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- External
- Regulator citations
- Notified Office of the New Hampshire Attorney General
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.