HackingIdentity (basic)Government IDFinancial accountMediumActive

OHL North America

bd_e41246c99067f7bc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 14, 2021

Filed

May 3, 2021

To disclose

7 weeks

Affected

5state residents only

Linked

3 filings

Confidence

66%

Full breach record for OHL North America →

OHL North America notified the New Hampshire Attorney General of a cybersecurity incident discovered in March 2021. A third party accessed OHL's systems and attempted to encrypt files, but OHL prevented encryption and removed the actor. The actor subsequently exfiltrated employee files containing PII, SSNs, and bank account information. Five New Hampshire residents were affected. OHL engaged forensic consultants, notified law enforcement, and provided 24 months of credit monitoring to affected employees. Notification to residents began May 4, 2021.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 18, 2021

Begins

May 3, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_91153bd854427ec72021-05-03Verified
Maine State AGbd_cb35e2db690fd77c2021-05-03Candidate

Name: OHL North America
norm: ohl north america

Name: OHL North America
norm: ohl north america

Discovered: Mar 14, 2021
Breach occurred: Mar 18, 2021 – Apr 8, 2021
Materiality determined: —
Notification sent: May 4, 2021
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Reported the incident to law enforcement
Initial access: valid_credentials

During the incident: Engaged a third party consultant to assist with the investigation
Reported the incident to law enforcement
Removed the third party from its environment and secured its systems
Began mailing written notice of the Incident to all employees that may be affected
Arranged for all affected employees to receive a twenty-four (24) month membership in Experian’s IdentityWorksSM credit monitoring and identity theft protection
Changes made: Reviewing its security measures and working to implement additional safeguards to reduce the risk of similar incidents occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGMay 3 · first

Maine State AGMay 3 · first

New Hampshire State AGMay 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ohl-north-america-20210503.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 3, 2021
Raw hash: 3f061f96a1a45b01185be401c95c3b54cfdb29bab858deb1d4fcb4dffcd97268

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityOHL North America

Victim entityOHL North America

Incidentdiscovered Mar 14, 2021

Stated responseEngaged a third party consultant to assist with the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov