MalwareOtherRansomwareVulnerability ExploitData EncryptedTargetedIdentity (basic)Government IDHealth (basic)PHIMediumContained

Kanuga

bd_d81748316e31b3ff · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 20, 2022

Filed

Mar 7, 2023

To disclose

14 months

Affected

4state residents only

Linked

4 filings

Confidence

66%

Full breach record for Kanuga →

Kanuga Conference Center notified the NH Attorney General of a ransomware attack discovered on Jan 20, 2022. Unauthorized access began around Jan 19, 2022, via an exchange server vulnerability. 4 NH residents affected; data included names, SSNs, and PHI. Kanuga engaged forensic experts, contacted the FBI, and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 14 months / 411 days

Jan 19, 2022

Begins

Jan 20, 2022

Discovered

Mar 7, 2023

Filed

vs. sector median

+51 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_b705dec512eaeaf72022-03-07 · +365dVerified
Indiana State AGbd_3745e7acfd98f83f2022-03-04 · +368dVerified
Maine State AGbd_646952e957e2292b2022-03-04 · +368dCandidate

Name: Whiteford, Taylor & Preston LLP
norm: whiteford taylor preston
Domain: whitefordlaw.com

Name: Kanuga
norm: kanuga
Domain: kanuga.org
Industry: Otherllm

Discovered: Jan 20, 2022
Breach occurred: Jan 19, 2022
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Mar 4, 2022
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the Attorney General of New HampshireContacted the FBI
Initial access: exploit_public_facing

During the incident: Hired third-party forensic experts to conduct a thorough investigation
Contacted the FBI to seek assistance with the incident
Began a comprehensive search of the data to determine what information was involved
Mailed written notification to potentially affected New Hampshire residents
Provided free access to credit monitoring services for one year through Kroll
Provided guidance on ways to protect against identity theft and fraud
Provided contact information for consumer reporting agencies
Provided notice to the three nationwide consumer reporting agencies
Provided notice to applicable government regulators, officials, and other Attorneys General
Changes made: Implementing any necessary additional safeguards
Enhancing and improving policies and procedures related to data protection
Improving cybersecurity infrastructure
Training employees on best practices to minimize the likelihood of this type of incident occurring again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(411 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMar 4 · first

Maine State AGMar 4 · first

Massachusetts State AG+3d

New Hampshire State AG+368d · this page

Pattern: first filing Mar 4 (IN), last Mar 7 (NH) — a 368-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/kanuga-conference-20220307.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 7, 2023
Raw hash: d1c69434b8856aec811c7442446cca9535889642d62f4e2f4fbfaac94fa89da5

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWhiteford, Taylor & Preston LLP

Victim entityKanuga

Incidentdiscovered Jan 20, 2022

Stated responseHired third-party forensic experts to conduct a thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov