MalwareOtherRansomwareData ExfiltratedData EncryptedIdentity (basic)Government IDMediumContained

Henry Company

bd_d78f812331de9ea0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 11, 2022

Filed

Apr 20, 2022

To disclose

6 weeks

Affected

5state residents only

Linked

7 filings

Confidence

63%

Full breach record for Henry Company →

Henry Company experienced a ransomware incident from Jan 21-29, 2022, impacting servers in the US and Canada. Unauthorized access to files containing names, driver's licenses, and SSNs was discovered on March 11, 2022. The company engaged forensic investigators, secured systems, and provided 24 months of identity theft protection via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 49 days

discovery → filing · 6 weeks / 40 days

Jan 21, 2022

Begins

Mar 11, 2022

Discovered

Apr 20, 2022

Filed

vs. sector median

2 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitequantumbd_af4cbd2f1f9d18b72022-04-29 · +10dCandidate

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_04fba9d34142ef402022-04-20Verified by operator
New Hampshire State AGbd_0eec8b7fae81952c2022-04-20Verified
Maine State AGbd_26de89cec27a546b2022-04-20Verified by operator
Massachusetts State AGbd_4756248a3fe0de9e2022-04-20Verified by operator

Show 1 more filing ↓up to 22d gap

Maine State AGbd_57e9a023321e3d6a2022-03-29 · +22dVerified by operator

Name: Henry Company
norm: henry
Domain: henry.com

Name: Henry Company
norm: henry
Domain: henry.com
Industry: Otherllm

Discovered: Mar 11, 2022
Breach occurred: Jan 21, 2022 – Jan 29, 2022
Undetected for: 49 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 20, 2022
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Engaged a leading third-party cybersecurity forensics firm to restore the security and integrity of our systems
Took the impacted systems offline to secure those systems
Scanned and reviewed systems to verify that they were safe to use prior to bringing them back online
Purchased twenty-four (24) months of identity theft protection services through Experian
Changes made: Implement additional incremental security measures to protect our systems
Help defend against this type of unlawful activity in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Maine State AGMar 29 · first

Indiana State AG+22d

New Hampshire State AG+22d

Maine State AG+22d

Massachusetts State AG+22d

Montana State AG+22d · this page

Pattern: first filing Mar 29 (ME), last Apr 20 (MT) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-313.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 20, 2022
Raw hash: 8bb6a35ec24e1b27a63bce15ac280ef32fc94cc4d2d19c823ccdd64269175725

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityHenry Company

Victim entityHenry Company

Incidentdiscovered Mar 11, 2022

Stated responseEngaged a leading third-party cybersecurity forensics firm to restore the security and integrity of our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov