Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
R. J. Grondin & Sons, Inc.
bd_d89306909dab799e · schema v1 · pii pii-v1
Full breach record for R. J. Grondin & Sons, Inc. →R.J. Grondin & Sons, Inc. reported a data security incident to the New Hampshire Attorney General. On October 26, 2023, the company detected unusual activity in an employee's email account, which had been accessed by an unauthorized actor from October 12-19, 2023. The breach impacted personal information, including Social Security numbers, of 4 New Hampshire residents. The company engaged forensic investigators, secured the network, notified law enforcement, and offered credit monitoring services to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b524c0066f48de2eVermont State AGfiled 2024-04-30(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/r-j-grondin-sons-20240502.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 2, 2024
- Raw hash
- c3645a966915041ef6b102cab34005af30ddf5a3483d23633424d0543dd41497
Reporting entity
- Name
- R. J. Grondin & Sons, Inc.norm: r j grondin sons
Victim entity
- Name
- R. J. Grondin & Sons, Inc.norm: r j grondin sons
Incident
- Discovered
- Oct 26, 2023
- Materiality determined
- Apr 23, 2024
- Notification sent
- Apr 30, 2024
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John M. Formella
- Initial access
- phishing_link
Compliance
- Time to disclose
- 27 weeks(189 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.