CENTRAL SECURITIES CORPORATION

Central Securities Corporation, a closed-end investment management company, notified the New Hampshire Attorney General of a cybersecurity incident. An unauthorized third party accessed internal systems on or about April 17, 2024, via a legitimate account of a third-party vendor. The actor exfiltrated data containing names and other personal information of seven New Hampshire residents on or about May 20, 2024. Central Securities discovered the activity on May 20, 2024, engaged forensic experts, notified law enforcement, terminated the vendor's access, and began mailing notifications on September 30, 2024, offering credit monitoring services.