MalwareManufacturingRetail & ConsumerManufacturingRansomwareSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedEmployee Data InvolvedPIIIdentity (basic)EmploymentLowContained

J.S. International, Inc. d/b/a JSI Cabinetry

bd_f95b389390b522c6 · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 7, 2024

Filed

Jul 22, 2024

To disclose

24 weeks

Affected

2state residents only

Linked

3 filings

Confidence

67%

J.S. International, Inc. d/b/a JSI Cabinetry reported a ransomware attack originating from a third-party web hosting vendor. Discovered Feb 7, 2024, the incident involved unauthorized access and data removal affecting 2 New Hampshire residents. Data included employment and personal info. JSI engaged forensic investigators, alerted law enforcement, reset passwords, and enhanced security monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d24 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 24 weeks / 166 days

Feb 7, 2024

Discovered

Jul 22, 2024

Filed

vs. sector median

+13 wks slower

This filing is one of 3 about the same incident.View merged incident

A leak claim by medusa about this victim predates this filing by 145 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_6358926f5ebc08352024-02-27 · +145dVerified by operator

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_233a554a081bb1422024-07-23 · +1dVerified by operator

Name: ECKERT SEAMANS CHERIN & MELLOTT, LLC
norm: eckert seamans cherin mellott

Name: J.S. International, Inc. d/b/a JSI Cabinetry
norm: j.s. international jsi cabinetry
Domain: jsicabinetry.com
Also named: J.S. International, Inc.dba oflegal entity
JSI Cabinetrydba oftrade name
Industry: ManufacturingllmRetail & Consumerllm

Discovered: Feb 7, 2024
Materiality determined: —
Notification sent: Jul 11, 2024
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Employment
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: supply_chain

During the incident: Began a comprehensive investigation with assistance from a leading cyber security and digital forensics firm
Alerted federal law enforcement
Conducted an extensive review of the information that may have been involved
Deployed security monitoring tools to enhance detection and accelerate response to cyber incidents
Conducted enterprise-wide password reset
Evaluated vendors with access to our network
Invested in enhanced security monitoring software
Contracted with a third-party to provide security monitoring services
Changes made: Deployed security monitoring tools to enhance detection and accelerate response to cyber incidents
Conducted enterprise-wide password reset
Evaluated vendors with access to our network
Invested in enhanced security monitoring software
Contracted with a third-party to provide security monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(166 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJul 22 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/j-s-international-jsi-cabinetry-20240722.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2024
Raw hash: 2de6c0d199b92a277c03859c6d2dd8f81df5b1bb07d663698dc22427180e56ac

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityECKERT SEAMANS CHERIN & MELLOTT, LLC

Victim entityJ.S. International, Inc. d/b/a JSI Cabinetry

Incidentdiscovered Feb 7, 2024

Stated responseBegan a comprehensive investigation with assistance from a leading cyber security and digital forensics firm

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov