HackingStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
M. Arthur Gensler Jr. & Associates, Inc.
bd_e71a88311b2e2220 · schema v1 · pii pii-v1
Full breach record for M. Arthur Gensler Jr. & Associates, Inc. →M. Arthur Gensler, Jr. & Associates, Inc. reported a security incident involving its third-party vendor, Progress MOVEit. An unauthorized party accessed the platform on May 15, 2023, and copied files between May 27 and May 31, 2023. The incident affected personal information of two New Hampshire residents. Gensler disabled access, patched the exploit, engaged forensic investigators, and notified law enforcement. Affected individuals were offered credit monitoring services.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2d48359ec9022072California State AGfiled 2023-08-09(15d gap)Candidate
- bd_904ab57c2f95240fVermont State AGfiled 2023-07-07(18d gap)Verified
- bd_f7fd0d0d98414d29Maine State AGfiled 2023-08-17(23d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/m-arthur-gensler-jr-associates-20230724.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 25, 2023
- Raw hash
- 3a9de88b0373f9cb67c19bf19dc8eb20a1d5f4d41a704f81372d081d9b76dca7
Reporting entity
- Name
- M. Arthur Gensler Jr. & Associates, Inc.norm: m arthur gensler jr associates
Victim entity
- Name
- M. Arthur Gensler Jr. & Associates, Inc.norm: m arthur gensler jr associates
Incident
- Discovered
- May 31, 2023
- Materiality determined
- Jun 23, 2023
- Notification sent
- Aug 9, 2023
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.