MalwareManufacturingManufacturingRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountCredentialsMediumContained

Piedmont Plastics

bd_f69d4cd8f8bbf0aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 3, 2020

Filed

May 3, 2021

To disclose

26 weeks

Affected

35state residents only

Linked

4 filings

Confidence

65%

Full breach record for Piedmont Plastics →

Piedmont Plastics, Inc. notified the New Hampshire Attorney General of a cyberattack occurring between Nov 1-3, 2020. Malware infected the network, and an unknown actor accessed and exfiltrated personal data (SSN, driver's license, financial accounts, credentials) of ~35 NH residents. Piedmont took systems offline, engaged forensic specialists, reported to federal law enforcement, and provided 1 year of Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 26 weeks / 181 days

Nov 1, 2020

Begins

Nov 3, 2020

Discovered

May 3, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_22ef66074979fd9c2021-04-27 · +6dVerified
Maine State AGbd_83c3ef3d8592eb2f2021-04-27 · +6dCandidate
Indiana State AGbd_943134cde84594482021-04-27 · +6dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Piedmont Plastics
norm: piedmont plastics
Domain: piedmontplastics.com
Industry: manufacturing
Industry: Manufacturingllm

Discovered: Nov 3, 2020
Breach occurred: Nov 1, 2020 – Nov 3, 2020
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 6, 2021
Affected individuals: 35state-resident count only
Data types: Government IDIdentity (basic)Financial accountCredentials
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: reported this incident to federal law enforcement and continue to cooperate with their investigation

During the incident: Took systems offline
Launched an investigation, with the assistance of third-party computer forensic specialists
Worked with third-party specialists to perform a comprehensive review of the contents of the affected systems
Conducted a manual review of internal records
Began providing preliminary notice of this event to potentially affected individuals
Providing written notice of this incident to potentially affected individuals
Reported this incident to federal law enforcement and continue to cooperate with their investigation
Providing access to credit monitoring and identity restoration services for one (1) year, through Equifax
Changes made: Working to implement additional safeguards and training to its employees
Reviewing existing security policies and have implemented additional cybersecurity measures to further protect against similar incidents moving forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(181 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGApr 27 · first

Maine State AGApr 27 · first

Indiana State AGApr 27 · first

New Hampshire State AG+6d · this page

Pattern: first filing Apr 27 (MA), last May 3 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/piedmont-plastics-20210503.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 3, 2021
Raw hash: 602b15c7085497c639a25365ed626fd9a664180511ccbcb5f7601f14724e72cf

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityPiedmont Plastics

Incidentdiscovered Nov 3, 2020

Stated responseTook systems offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov