MalwareManufacturingManufacturingRansomwareData ExfiltratedCustomer Data InvolvedPIIGovernment IDEmploymentMediumContained

O'Neal Industries

bd_f58b1da4f39c8133 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2022

Filed

Apr 5, 2023

To disclose

18 weeks

Affected

3state residents only

Linked

5 filings

Confidence

64%

Full breach record for O'Neal Industries →

O'Neal Industries, Inc. reported a security incident in November 2022 involving unauthorized access via sophisticated malware. The breach affected PII, including SSNs and employment data, of 3 New Hampshire residents. The company engaged external cybersecurity experts, implemented additional authentication and monitoring safeguards, and provided credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 30 days

discovery → filing · 18 weeks / 125 days

Nov 1, 2022

Begins

Dec 1, 2022

Discovered

Apr 5, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_95165656f3a6aea72023-03-31 · +5dVerified
Montana State AGbd_c89265a50a6594092023-03-31 · +5dVerified
Massachusetts State AGbd_734788de3e16b9882023-02-16 · +48dCandidate
Indiana State AGbd_6b4aeaa8ee5c7aed2023-02-15 · +49dVerified

Name: O'Neal Industries
norm: o neal

Name: O'Neal Industries
norm: o neal
Industry: Manufacturingllm

Discovered: Dec 1, 2022
Breach occurred: Nov 1, 2022 – Nov 30, 2022
Undetected for: 30 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2023
Affected individuals: 3state-resident count only
Data types: PIIGovernment IDEmployment
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Launched an investigation with the help of external cybersecurity experts
Supplied written notice to three (3) New Hampshire residents
Offered complimentary enrollment in credit monitoring and identity theft protection services
Hired external cybersecurity experts to investigate what happened, to strengthen its computer network, and to monitor the "dark web" for any references to information involved in this incident
Changes made: Implement additional safeguards to strengthen its computer network
Use of additional authentication requirements
Detection software
Monitoring tools
Password resets (domain, administrator and user)
Password rotations
Server hardening
Security configuration updates
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(125 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGFeb 15 · first

Massachusetts State AG+1d

California State AG+44d

Montana State AG+44d

New Hampshire State AG+49d · this page

Pattern: first filing Feb 15 (IN), last Apr 5 (NH) — a 49-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/oneal-industries-20230405.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 5, 2023
Raw hash: 7d118026070df19414745e071ba85b4d0b859ae531f1123077d293a75bac9d51

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityO'Neal Industries

Victim entityO'Neal Industries

Incidentdiscovered Dec 1, 2022

Stated responseLaunched an investigation with the help of external cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov