MalwareTechnologyInformationRansomwareRansom DemandedData EncryptedEmployee Data InvolvedPIIIdentity (basic)Government IDMediumContained

Headwall Photonics

bd_fb42e93415d68a91 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 26, 2023

Filed

Jun 8, 2023

To disclose

13 days

Affected

24state residents only

Linked

4 filings

Confidence

68%

Full breach record for Headwall Photonics →

Headwall Photonics, Inc. notified the New Hampshire Attorney General on June 8, 2023, of a ransomware attack discovered on May 26, 2023. The incident compromised personal information of 24 New Hampshire residents, including employees, former employees, investors, and businesses. Headwall engaged cybersecurity specialists, amended security protocols, and provided 24 months of complimentary credit monitoring via Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 days

May 26, 2023

Discovered

Jun 8, 2023

Filed

vs. sector median

17 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_7c88004698ab3f2a2023-06-08Candidate
Massachusetts State AGbd_e4f8323bb27212432023-06-08Verified
Indiana State AGbd_e8140c13f7f81d262023-06-07 · +1dVerified

Name: Headwall Photonics
norm: headwall photonics

Name: Headwall Photonics
norm: headwall photonics
Industry: Technologyllm

Discovered: May 26, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 24state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice

During the incident: Engaged with cybersecurity specialists and security experts
Reviewing and amending security measures and protocols
Set up affected individuals with free credit monitoring services
Changes made: Reviewing and amending security measures and protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJun 7 · first

Maine State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/headwall-photonics-20230608.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 8, 2023
Raw hash: da7b090e3e1f6e5101fb025841c83e594f68728ae4272e8b83931546f04b7180

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityHeadwall Photonics

Victim entityHeadwall Photonics

Incidentdiscovered May 26, 2023

Stated responseEngaged with cybersecurity specialists and security experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov