HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

BBC Industries, Inc.

bd_e206cfdc3225708a · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 24, 2020

Filed

Jan 25, 2021

To disclose

18 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for BBC Industries, Inc. →

BBC Industries, Inc. notified the New Hampshire Attorney General of a data breach affecting one NH resident. Unauthorized access to an email account occurred on or about August 18, 2020, and was discovered on September 24, 2020. BBC reset passwords, implemented MFA, engaged forensic experts, and offered two years of credit monitoring via Kroll. Notice was sent on January 19, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 37 days

discovery → filing · 18 weeks / 123 days

Aug 18, 2020

Begins

Sep 24, 2020

Discovered

Jan 25, 2021

Filed

vs. sector median

+7 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_189d45e9c2b805492021-01-25Candidate

Name: FisherBroyles LLP
norm: fisherbroyles

Name: BBC Industries, Inc.
norm: bbc industries
Industry: manufacturing
Industry: Manufacturingllm

Discovered: Sep 24, 2020
Breach occurred: Aug 18, 2020
Undetected for: 37 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 19, 2021
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Executing a systemwide email password reset
Implementing Multi Factor Authentication
Engaged third-party IT forensic experts to conduct a detailed systemwide review
Retained Kroll to provide notice to the identified and potentially affected individuals
Offering two years of complimentary identity theft protection and credit monitoring services
Set up, through Kroll, a dedicated number for potentially affected individuals to call
Changes made: Forcing a global password reset
Implementing Multi Factor Authentication for users
Had third-party experts review its system for any additional unauthorized rules or evidence of access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(123 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGJan 25 · first

New Hampshire State AGJan 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bbc-industries-20210125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2021
Raw hash: ea28b82eacf09a68b92cf95dbd20477f5d82819cf1be3d41d8d793dbca104479

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFisherBroyles LLP

Victim entityBBC Industries, Inc.

Incidentdiscovered Sep 24, 2020

Stated responseExecuting a systemwide email password reset

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov