HackingSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained

Broadband Access Services

bd_01cd683f2312d323 · schema v1 · pii pii-v1

Full breach record for Broadband Access Services →

Broadband Access Services (BAS), a telecommunications construction company, notified the NH Attorney General of a data breach affecting its cloud hosting provider. The provider experienced an unauthorized access incident on Dec 9, 2022. BAS was notified on Jan 11, 2023, and identified that HR files containing NH residents' names, SSNs, and financial account numbers were accessed. 55 NH residents were affected. BAS mailed notifications on Mar 9, 2023, and offered Equifax credit monitoring.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_bd52f288256f5d43Maine State AGfiled 2023-03-09Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/broadband-access-services-20230309.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 9, 2023
Raw hash: 739c5ea614355e58a04b42730f1623cc8dd94e988d85e2006d0795052be22928

Reporting entity

Name: Broadband Access Services
norm: broadband access

Victim entity

Name: Broadband Access Services
norm: broadband access

Incident

Discovered: Jan 11, 2023
Materiality determined: —
Notification sent: Mar 9, 2023
Affected individuals: 55
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: supply_chain

Compliance

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.