VT San Antonio Aerospace, Inc.

VT San Antonio Aerospace, Inc. (SAA) was the target of a ransomware attack by the Maze Group. On May 22, 2020, SAA discovered servers infected with ransomware. The Maze Group demanded a ransom and claimed to have exfiltrated data. Forensic investigation confirmed data exfiltration prior to ransomware release. SAA refused to pay. The Maze Group published stolen data on their website between June 4 and July 6, 2020. Approximately 12 New Hampshire residents were affected. Exposed data included name, SSN, DOB, health information, passport number, and financial account numbers. SAA engaged forensic investigators, notified FBI and DoD, and implemented security enhancements including FireEye tools and Palo Alto firewall management. 24 months of credit monitoring offered.