HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Ralston Architects

bd_f80573ba6bd18f7c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 25, 2016

Filed

Aug 16, 2016

To disclose

22 days

Affected · nationwide

291 in this filing

Confidence

66%

Full breach record for Ralston Architects →

W.C. Ralston Architects notified the NH Attorney General of a data breach involving RSI's remote access software. Unauthorized access occurred between July 18-25, 2016, exposing PII (SSN, DOB, contact info) of 29 employees. One NH resident was affected. The breach was contained, and notification was sent on August 17, 2016.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 22 days

Jul 18, 2016

Begins

Jul 25, 2016

Discovered

Aug 16, 2016

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed29 affectedView incident

Name: FLP Law Group LLP
norm: flp law

Name: Ralston Architects
norm: ralston architects
Domain: ralstonarchitects.com
Industry: Professional Servicesllm

Discovered: Jul 25, 2016
Breach occurred: Jul 18, 2016 – Jul 25, 2016
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 17, 2016
Affected individuals: 29state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Third party: via RSI
Initial access: external_remote_services

During the incident: Working proactively and aggressively with RSI to address the issue
Ensured the security breach has been contained and the threat removed
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 days(22 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wc-ralston-architects-20160816.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 16, 2016
Raw hash: 47512ad1a43bd95a5717196284e1f35769eafb9a17ee1ec641ce1669f8176f1a

Reporting entityFLP Law Group LLP

Victim entityRalston Architects

Incidentdiscovered Jul 25, 2016

Stated responseWorking proactively and aggressively with RSI to address the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov