MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

E.R. Snell Contractor, Inc.

bd_ea82ce79b5cc20e0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 6, 2020

Filed

Jan 20, 2021

To disclose

19 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for E.R. Snell Contractor, Inc. →

E.R. Snell Contractor, Inc. notified the New Hampshire Attorney General of a data event involving malware that encrypted files and allowed an unauthorized actor to exfiltrate names, addresses, and Social Security numbers. The incident affected one New Hampshire resident. The breach occurred between September 1 and September 6, 2020, and was discovered on September 6, 2020. The company engaged forensic investigators, notified the FBI, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 19 weeks / 136 days

Sep 1, 2020

Begins

Sep 6, 2020

Discovered

Jan 20, 2021

Filed

vs. sector median

+1 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_2df1ef42437c844d2021-01-14 · +6dVerified
Montana State AGbd_ec7542db646a42cc2021-01-14 · +6dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: E.R. Snell Contractor, Inc.
norm: er snell contractor
Industry: Professional Servicesllm

Discovered: Sep 6, 2020
Breach occurred: Sep 1, 2020 – Sep 6, 2020
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 14, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation ("FBI")
Initial access: exploit_public_facing

During the incident: Began working with third-party forensic investigators
Notified the Federal Bureau of Investigation ("FBI")
Implemented additional safeguards to further secure the information in its systems
Providing those potentially affected by this incident with complimentary access to credit monitoring services for twelve (12) months, through TransUnion
Changes made: Reviewed its existing policies and procedures and implemented additional safeguards to further secure the information in its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(136 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJan 14 · first

Montana State AGJan 14 · first

New Hampshire State AG+6d · this page

Pattern: first filing Jan 14 (MA), last Jan 20 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/e-r-snell-contractor-20210120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 20, 2021
Raw hash: 6e2ab7eb0c8ef59921927f904e2edb4910d361895135ad1613171f58a82a4e4b

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityE.R. Snell Contractor, Inc.

Incidentdiscovered Sep 6, 2020

Stated responseBegan working with third-party forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov