HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Grand Street Settlement
bd_01256d65c61ef019 · schema v1 · pii pii-v1
Full breach record for Grand Street Settlement →Grand Street Settlement, Inc. notified the New Hampshire Attorney General of a data security incident occurring on June 25, 2021. An unknown actor gained unauthorized access to the network, potentially impacting one New Hampshire resident's personal information, including government IDs, financial account numbers, and names. Grand Street engaged cybersecurity experts, reported the incident to the FBI, and provided one year of credit monitoring services to the affected individual.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/grand-street-settlement-20220121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 21, 2022
- Raw hash
- 5116227daa36649e2ffc7c7dc616eaf30155963c10cd394506b92a0207ca3ac0
Reporting entity
- Name
- Grand Street Settlementnorm: grand street settlement
- Domain
- grandsettlement.org
Victim entity
- Name
- Grand Street Settlementnorm: grand street settlement
- Domain
- grandsettlement.org
Incident
- Discovered
- Jun 25, 2021
- Materiality determined
- —
- Notification sent
- Jan 21, 2022
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 30 weeks(210 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.