MalwareFinancial ServicesTechnologyFinanceRansomwareData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Ascensus Group Holdings, Inc.

bd_e10ff266252aa374 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 15, 2011

Filed

Jul 27, 2011

To disclose

15 weeks

Affected

14state residents only

Confidence

67%

Full breach record for Ascensus Group Holdings, Inc. →6 incidents on file

Ascensus, Inc. notified the NH Attorney General of a malware incident discovered on April 15, 2011, when federal law enforcement informed them of a criminal attack. The malware potentially allowed collection of personal information. 14 NH residents were potentially affected, with names and SSNs found in data created by the virus. Notification was sent July 28, 2011, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 weeks / 103 days

Apr 15, 2011

Discovered

Jul 27, 2011

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed14 affectedView incident

Name: Marshall Dennehey Warner Coleman & Goggin, P.A.
norm: marshall dennehey warner coleman goggin

Name: Ascensus Group Holdings, Inc.
norm: ascensus group
Industry: Financial ServicesllmTechnologyllm

Discovered: Apr 15, 2011
Materiality determined: —
Notification sent: Jul 28, 2011
Affected individuals: 14state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement authorities
Initial access: external_remote_services

During the incident: Took immediate action to block the virus and remove it from its network
Launched an internal investigation
Retained outside security and computer forensics experts
Cooperating with federal law enforcement
Completed a comprehensive investigation of its network
Offering one year of free credit monitoring through Experian
Changes made: Conducted a comprehensive internal review of its systems and procedures to further secure its technology environment against emerging malware threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(103 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ascensus-20110727.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2011
Raw hash: 256fe7d84eb724e6022d5e3c94a4ab25c0eae6df2d7fe7e59ad91acfa30495c6

Reporting entityMarshall Dennehey Warner Coleman & Goggin, P.A.

Victim entityAscensus Group Holdings, Inc.

Incidentdiscovered Apr 15, 2011

Stated responseTook immediate action to block the virus and remove it from its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov