HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Ainsworth

bd_eeb3ccc87965c40d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 11, 2024

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Ainsworth →

Ainsworth, Inc. notified the New Hampshire Attorney General of unauthorized network access occurring between Nov 13-30, 2023. An actor viewed and copied files containing PII. GDI (parent company) contained the incident, engaged forensic help, and notified law enforcement. One NH resident affected. Notification mailed March 11, 2024, with credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 13, 2023

Begins

Feb 7, 2024

Scope determined

Mar 11, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: The Ainsworth 2023
norm: the ainsworth 2023
Domain: theainsworth.com

Name: Ainsworth
norm: ainsworth
Domain: cityofainsworth.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Nov 13, 2023 – Nov 30, 2023
Materiality determined: Feb 7, 2024
Notification sent: Mar 11, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Implemented its incident response plan
Took steps to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Notified law enforcement
Changes made: Offering complimentary credit monitoring and identity theft protection services through Experian
Established a dedicated call center
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ainsworth-20240311.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 11, 2024
Raw hash: 2166054c9b243d823b5ea5558f1bc8a15c8342458e776eb9eb4b25baf03e9b28

Reporting entityThe Ainsworth 2023

Victim entityAinsworth

IncidentUnauthorized Access

Stated responseImplemented its incident response plan

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov