The Lyon-Waugh Auto Group

The Lyon Waugh Auto Group reported a ransomware incident to the New Hampshire Attorney General on February 10, 2022. The company discovered unauthorized access on December 4, 2021, where an attacker exploited a vulnerability to gain access to systems. The attacker exfiltrated personal information of approximately 819 New Hampshire residents, including employees and customers. Data involved names, addresses, SSNs, and driver's licenses. The company restored systems from backups without paying ransom, engaged forensic investigators, and notified the FBI. Notifications were sent to affected individuals on February 9, 2022.