MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedDelayed DiscoveryPIIIdentity (basic)LowActive

PMA Consultants

bd_fee1b469d6f3bacd · schema v1 · pii pii-v1

Severity

Low

Discovered

May 7, 2024

Filed

Jan 30, 2025

To disclose

38 weeks

Affected

4state residents only

Linked

7 filings

Confidence

67%

Full breach record for PMA Consultants →

PMA Consultants, a professional services firm, notified the New Hampshire Attorney General on January 30, 2025, of a ransomware attack discovered on May 7, 2024. The incident affected 4 New Hampshire residents. PMA engaged third-party forensic specialists, reported to federal law enforcement, and sent notices to affected individuals offering credit monitoring. The scope of data exposure was determined through a comprehensive review completed in December 2024.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 38 weeks / 268 days

May 7, 2024

Discovered

Jan 30, 2025

Filed

vs. sector median

+20 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_ce35cec346b7fd9a2025-01-30Verified
Maine State AGbd_e55973011bb404be2025-01-30Candidate
Maine State AGbd_7b8da585f4ff44552025-03-17 · +46dVerified
New Hampshire State AGbd_7d2860b96ee0522a2025-03-17 · +46dVerified

Show 2 more filings ↓up to 46d gap

Indiana State AGbd_93723ad4fd2818342025-03-17 · +46dVerified
Maryland State AGbd_fd0865727c08d5842025-03-17 · +46dVerified

Name: Cipriani
norm: cipriani
Domain: cipriani.com

Name: PMA Consultants
norm: pma consultants
Industry: Professional Servicesllm

Discovered: May 7, 2024
Materiality determined: —
Notification sent: Jan 29, 2025
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: reported this incident to federal law enforcement

During the incident: Began working with its I.T. team and third-party forensic specialists to secure the network
Restore its systems to operability
Investigate the full nature and scope of the incident
Reported this incident to federal law enforcement
Began a comprehensive and time-consuming review of the potentially impacted files
Sent written notice of this incident to the potentially impacted New Hampshire residents
Offer of complimentary credit monitoring and identity theft protection services
Changes made: Restore its systems to operability
Offer of complimentary credit monitoring and identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(268 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Massachusetts State AGJan 30 · first

Maine State AGJan 30 · first

New Hampshire State AGJan 30 · first · this page

Maine State AG+46d

New Hampshire State AG+46d

Indiana State AG+46d

Maryland State AG+46d

Pattern: first filing Jan 30 (MA), last Mar 17 (MD) — a 46-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pma-consultants-20250130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 30, 2025
Raw hash: 063e5068b2abe1fa33b0d7ac09d091c2aa6033d1164887d83b46ccb2245305dc

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityCipriani

Victim entityPMA Consultants

Incidentdiscovered May 7, 2024

Stated responseBegan working with its I.T. team and third-party forensic specialists to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov