MalwareTechnologyInformationRansomwareData EncryptedCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)EmploymentMediumContained

THE BELL COMPANY, LLC

bd_f3f3f96f6bc90e82 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 17, 2021

Filed

Feb 10, 2022

To disclose

17 weeks

Affected

134state residents only

Linked

2 filings

Confidence

67%

Full breach record for THE BELL COMPANY, LLC →2 incidents on file

The Bell Company, LLC notified the New Hampshire Attorney General of a security incident discovered on October 17, 2021, involving ransomware encryption of systems. The breach affected 134 New Hampshire residents, exposing names, SSNs, and employment data. The company engaged cybersecurity professionals, reported to law enforcement, and offered 12 months of credit monitoring. Notification to residents was scheduled for February 11, 2022.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 116 days

Oct 17, 2021

Discovered

Feb 10, 2022

Filed

vs. sector median

+6 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_a0d798dc7415f9ab2022-02-18 · +8dCandidate

Name: Bond, Schoeneck & King, PLLC
norm: bond schoeneck king

Name: THE BELL COMPANY, LLC
norm: the bell
Industry: Technologyllm

Discovered: Oct 17, 2021
Materiality determined: —
Notification sent: Feb 11, 2022
Affected individuals: 134state-resident count only
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External
Regulator citations: reported the incident to law enforcement

During the incident: Reported the incident to law enforcement
Working with cybersecurity professionals to contain and suspend the intrusion and to restore access to Bell’s stored data
Reviewing its cybersecurity policies and procedures to ensure ongoing compliance with applicable laws
Implemented additional security measures and other changes intended to protect the privacy of individuals moving forward and to prevent any subsequent incidents in the future
Offering identity theft protection services through IDX
Changes made: Reviewing its cybersecurity policies and procedures to ensure ongoing compliance with applicable laws
Implemented additional security measures and other changes intended to protect the privacy of individuals moving forward and to prevent any subsequent incidents in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(116 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGFeb 10 · first · this page

Maine State AG+8d

Pattern: first filing Feb 10 (NH), last Feb 18 (ME) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/bell-company-20220210.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 10, 2022
Raw hash: e9b97c247c5ffc665443088ff857758c38fd935eb9bc2622deb8cf2b515d8bd6

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBond, Schoeneck & King, PLLC

Victim entityTHE BELL COMPANY, LLC

Incidentdiscovered Oct 17, 2021

Stated responseReported the incident to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov