MalwareTechnologyInformationRansomwareData EncryptedCustomer Data InvolvedPIIIdentity (basic)LowContained

Liveaction inc.

bd_f97c97df77f34290 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 22, 2023

Filed

Oct 30, 2023

To disclose

23 weeks

Affected

6state residents only

Linked

6 filings

Confidence

66%

Full breach record for Liveaction inc. →2 incidents on file

LiveAction, Inc., a software company providing analytics and network monitoring tools, detected and stopped a sophisticated ransomware attack on May 22, 2023. An unauthorized third party accessed and disabled some systems. The incident potentially affected 6 New Hampshire residents. LiveAction engaged a cybersecurity firm, notified the FBI, wiped and rebuilt systems, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d23 weeks discovery → filing

Incident timeline

discovery → filing · 23 weeks / 161 days

May 22, 2023

Begins

May 22, 2023

Discovered

Oct 30, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by nokoyawa about this victim predates this filing by 161 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitenokoyawabd_4e388e698c35777e2023-05-22 · +161dVerified by operator
Leak Sitesnatchbd_ba6c37de083ccd6b2023-05-22 · +161dVerified by operator

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_165ebb6a8cf71fc22023-10-30Candidate
Massachusetts State AGbd_2d01f8c6d8d82ad22023-10-30Verified by operator
Maine State AGbd_f74c1bf49d9299092023-10-30Candidate

Name: LiveAction, Inc.
norm: liveaction

Name: Liveaction inc.
norm: liveaction
Domain: liveaction.com
Industry: Technologyllm

Discovered: May 22, 2023
Breach occurred: May 22, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 27, 2023
Affected individuals: 6state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Initiated its response protocols
Launched an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Contacted the Federal Bureau of Investigation
Wiped and rebuilt affected systems
Took steps to bolster its network security
Changes made: Increasing the frequency of employee training
Reviewed and altered its policies, procedures, and network security software relating to the security of its systems and servers
Reviewed and altered how it stores and manages data
Offered complimentary identity theft and credit monitoring services provided by Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGOct 30 · first

Massachusetts State AGOct 30 · first

Maine State AGOct 30 · first

New Hampshire State AGOct 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/liveaction-20231030.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2023
Raw hash: 8a9e2f48161781916cb0848fdea612c67d8728de0258b24c8840be5654f118d8

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entityLiveAction, Inc.

Victim entityLiveaction inc.

Incidentdiscovered May 22, 2023

Stated responseInitiated its response protocols

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov