HackingManufacturingManufacturingData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Superior Communications, Inc

bd_e15b6373292d5206 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 12, 2023

Filed

Feb 15, 2024

To disclose

31 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for Superior Communications, Inc →

Superior Communications, Inc. notified the NH AG of a data security incident where files were acquired without authorization on or about July 9, 2023. The incident affected 1 New Hampshire resident, involving personal information. Superior engaged cybersecurity experts, reported to the FBI IC3, implemented additional security features, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d31 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 31 weeks / 218 days

Jul 9, 2023

Begins

Jul 12, 2023

Discovered

Jan 24, 2024

Scope determined

Feb 15, 2024

Filed

vs. sector median

+20 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by alphv about this victim predates this filing by 171 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitealphvbd_ea5d8d746a0c65e42023-08-28 · +171dVerified by operator

Regulatory filings (3) · sorted by filing gap

California State AGbd_30a51dc7426d6d012024-02-15Verified
Massachusetts State AGbd_920ac04bd468f6f12024-02-16 · +1dVerified
Montana State AGbd_7e1435729191b20d2024-02-14 · +1dCandidate

Name: Superior Communications, Inc
norm: superior communications
Domain: superiorcommunications.com

Name: Superior Communications, Inc
norm: superior communications
Domain: superiorcommunications.com
Industry: Manufacturingllm

Discovered: Jul 12, 2023
Breach occurred: Jul 9, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: Jan 24, 2024
Notification sent: Feb 14, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to the Federal Bureau of Investigation’s Internet Crime Complaint Center

During the incident: Engaged cybersecurity experts to conduct an investigation
Engaged a third-party vendor to conduct a comprehensive review of the potentially affected data
Reported this incident to the Federal Bureau of Investigation’s Internet Crime Complaint Center
Implemented additional security features
Offered complimentary services through IDX, which includes credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy, fully-managed identity theft recovery services, and 90 days access to a call center
Changes made: Implemented additional security features in an effort to prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(218 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGFeb 14 · first

California State AG+1d

New Hampshire State AG+1d · this page

Massachusetts State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/superior-communications-20240215.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 15, 2024
Raw hash: e27e3bae97f8de4cb86e13f1983d0933a239f24a453b5a3880adc2eb3842db6d

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entitySuperior Communications, Inc

Victim entitySuperior Communications, Inc

Incidentdiscovered Jul 12, 2023

Stated responseEngaged cybersecurity experts to conduct an investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov