MalwareManufacturingManufacturingRansomwareCapture Stored DataData ExfiltratedRansom DemandedCustomer Data InvolvedPIIIdentity (basic)LowContained

MW Components

bd_dce2bfbf462b0778 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 26, 2023

Filed

Aug 1, 2023

To disclose

18 weeks

Affected

3state residents only

Linked

10 filings

Confidence

65%

Full breach record for MW Components →2 incidents on file

MW Components reported a ransomware attack discovered on March 26, 2023, involving unauthorized access to systems between March 1-26, 2023. The incident affected 3 New Hampshire residents, exposing personal information. MW engaged forensic investigators, notified law enforcement, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d18 weeks discovery → filing

Incident timeline

undetected · 25 days

discovery → filing · 18 weeks / 128 days

Mar 1, 2023

Begins

Mar 26, 2023

Discovered

May 19, 2023

Scope determined

Aug 1, 2023

Filed

This filing is one of 10 about the same incident.View merged incident

A leak claim by blacksuit about this victim predates this filing by 105 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_7c646ecd17cfb9c42023-04-18 · +105dVerified by operator

Regulatory filings (8) · sorted by filing gap

Indiana State AGbd_2ba967fa047ad15e2023-07-28 · +4dCandidate
California State AGbd_2f2ea2a07ebd35492023-07-28 · +4dVerified
Massachusetts State AGbd_942fc7aeb5dacbb42023-07-28 · +4dVerified
Vermont State AGbd_961842e4dc0b2aad2023-08-28 · +27dVerified

Show 4 more filings ↓up to 212d gap

Maine State AGbd_5cf56f6afff3cbc62023-08-29 · +28dVerified
California State AGbd_e09ff3bc5f2bd8f22023-08-29 · +28dVerified
New Hampshire State AGbd_5ee69a804aecb5472023-08-30 · +29dVerified
Illinois State AGbd_4a805e56cbe3021a2023-01-01 · +212dVerified by operator

Name: MW Components
norm: mw components
Domain: mwcomponents.com

Name: MW Components
norm: mw components
Domain: mwcomponents.com
Industry: Manufacturingllm

Discovered: Mar 26, 2023
Breach occurred: Mar 1, 2023 – Mar 26, 2023
Undetected for: 25 daysoccurrence → discovery
Materiality determined: May 19, 2023
Notification sent: Jul 28, 2023
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General of the State of New Hampshire

During the incident: Began an internal investigation
Notified law enforcement
Worked to secure their systems
Engaged a forensic security firm to assist with the investigation
Changes made: Reviewing its information security policies
Evaluating methods to reduce the risk of a similar incident occurring in the future
Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 7 states

View merged incident ↗

Illinois State AGJan 1 · first

Indiana State AG+208d

California State AG+208d

Massachusetts State AG+208d

New Hampshire State AG+212d · this page

Vermont State AG+239d

Maine State AG+240d

California State AG+240d

New Hampshire State AG+241d

Pattern: first filing Jan 1 (IL), last Aug 30 (NH) — a 241-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mw-components-20230728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2023
Raw hash: 9626312e7f0405593cd37d4b2891618e5c25aabd26dc86993a48bcc8607f4837

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityMW Components

Victim entityMW Components

Incidentdiscovered Mar 26, 2023

Stated responseBegan an internal investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov