AccidentalMisconfigurationCustomer Data InvolvedPIIFINANCIAL_ACCOUNTLowContained
MASSACHUSETTS FINANCIAL SERVICES COMPANY
bd_0094f65f73189b2d · schema v1 · pii pii-v1
Full breach record for MASSACHUSETTS FINANCIAL SERVICES COMPANY →Massachusetts Financial Services Company notified the New Hampshire Attorney General on April 1, 2009, of a data security incident occurring on February 23, 2009. An error in the online tax reporting system inadvertently made U.S. Form 1099 tax forms of certain unrelated accounts viewable by a single customer. The disclosed data included names, addresses, account numbers, and tax reporting amounts, but no Social Security numbers. The company removed the forms, increased monitoring, and offered free credit monitoring via Equifax to affected customers.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/massachusetts-financial-20090401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 1, 2009
- Raw hash
- fb4fc4979eec6efca39cd8b35f95a0658b40c967c4ae71a8a3cf192a52010168
Reporting entity
- Name
- MASSACHUSETTS FINANCIAL SERVICES COMPANYnorm: massachusetts financial
Victim entity
- Name
- MASSACHUSETTS FINANCIAL SERVICES COMPANYnorm: massachusetts financial
Incident
- Discovered
- Feb 23, 2009
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- External
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.