HackingProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

CHEMONICS INTERNATIONAL, INC.

bd_dbeccbbf8d84c0af · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 12, 2021

Filed

Oct 3, 2022

To disclose

15 months

Affected

5state residents only

Linked

5 filings

Confidence

66%

Full breach record for CHEMONICS INTERNATIONAL, INC. →2 incidents on file

Chemonics International, Inc. notified New Hampshire AG of a cyberattack where unauthorized actors accessed email accounts from March 2 to July 13, 2021. Discovered July 12, 2021. 5 NH residents affected; names, SSNs, and financial account info exposed. Notices sent Sept 30, 2022. Forensic experts engaged; law enforcement notified; credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 132 days

discovery → filing · 15 months / 448 days

Mar 2, 2021

Begins

Jul 12, 2021

Discovered

Oct 3, 2022

Filed

vs. sector median

+46 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_1872409e6f541d4f2022-09-30 · +3dCandidate
Massachusetts State AGbd_59039d4ee5ed1ed02022-09-30 · +3dVerified
Maine State AGbd_769c0bb4873b526e2022-09-30 · +3dVerified by operator
Indiana State AGbd_b18c230b4d6a72de2022-09-30 · +3dVerified

Name: CHEMONICS INTERNATIONAL, INC.
norm: chemonics international

Name: CHEMONICS INTERNATIONAL, INC.
norm: chemonics international
Industry: Professional Servicesllm

Discovered: Jul 12, 2021
Breach occurred: Mar 2, 2021 – Jul 13, 2021
Undetected for: 132 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 30, 2022
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Initiated an investigation of the incident with the assistance of forensic experts
Secured our network
Implemented measures to further improve the security of our systems
Safely remediated our systems and operations
Notified law enforcement
Offering, free of charge, 24 months of credit monitoring, fraud consultation, and identity theft restoration services
Changes made: Implemented additional measures and controls designed to enhance the security of our network and systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(448 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGSep 30 · first

Massachusetts State AGSep 30 · first

Maine State AGSep 30 · first

Indiana State AGSep 30 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/chemonics-international-20221003.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 3, 2022
Raw hash: 956e3723bcad1cfd251113466d83f13313f2310591d80cccc496073476ce6fcb

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCHEMONICS INTERNATIONAL, INC.

Victim entityCHEMONICS INTERNATIONAL, INC.

Incidentdiscovered Jul 12, 2021

Stated responseInitiated an investigation of the incident with the assistance of forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov