HackingOtherData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowContained

Gnome, Inc.

bd_f1bb05cae83019d1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 23, 2023

Filed

Mar 21, 2024

To disclose

21 weeks

Affected

5state residents only

Linked

4 filings

Confidence

67%

Full breach record for Gnome, Inc. →2 incidents on file

Gnome, Inc. dba Gnome Landscapes notified the New Hampshire Attorney General on March 21, 2024, of a data security incident discovered on October 23, 2023. An unauthorized actor acquired files containing personal information. Five New Hampshire residents were notified. Gnome engaged external cybersecurity experts, secured the network, and offered credit monitoring and identity theft protection services through IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 21 weeks / 150 days

Oct 23, 2023

Discovered

Mar 21, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_0a46d073588765ac2024-03-21Candidate
Massachusetts State AGbd_49ff0729d865b1752024-03-21Verified
Vermont State AGbd_f2723e80136e60d32024-03-21Verified

Name: Constangy, Brooks, Smith & Prophete, LLP
norm: constangy brooks smith prophete

Name: Gnome, Inc.
norm: gnome
Also named: Gnome, Inc.dba oflegal entity
Gnome Landscapesdba oftrade name
Industry: Otherllm

Discovered: Oct 23, 2023
Materiality determined: —
Notification sent: Dec 18, 2023
Affected individuals: 5state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Took steps to secure the network
Engaged a dedicated team of external cybersecurity experts to assist in responding to and investigating the incident
Launched a comprehensive review of all potentially affected information
Began notifying impacted individuals
Notified five (5) New Hampshire residents of this data security incident via U.S. First-Class Mail
Changes made: Implemented additional security measures in an effort to prevent a similar incident from occurring in the future
Offered individuals complimentary services through IDX, a Zero Fox Company, which includes credit monitoring, dark web monitoring, a $1 million identity fraud loss reimbursement policy, and fully-managed identity theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(150 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMar 21 · first

Massachusetts State AGMar 21 · first

Vermont State AGMar 21 · first

New Hampshire State AGMar 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gnome-inc-dba-gnome-landscapes-20240321.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 21, 2024
Raw hash: fde1b6d77891036666e60dcfebd5eae4537131d40d4ade2edb1fb4c90b3b4c74

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityConstangy, Brooks, Smith & Prophete, LLP

Victim entityGnome, Inc.

Incidentdiscovered Oct 23, 2023

Stated responseTook steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov