PhysicalManufacturingManufacturingLossEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

Tremco CPG Inc.

bd_023b2d884b5a8f1b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 17, 2015

Filed

Jul 29, 2015

To disclose

6 weeks

Affected

5state residents only

Linked

2 filings

Confidence

66%

Full breach record for Tremco CPG Inc. →2 incidents on file

Tremco Incorporated reported the loss of a company-issued laptop containing employee personal information, including names, dates of birth, Social Security numbers, home addresses, and personal telephone numbers. The incident affected 5 New Hampshire residents. The laptop was left in an airline seat on June 17, 2015. The device was password-protected, and remote monitoring indicated no unauthorized access. The company offered two years of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 42 days

Jun 17, 2015

Begins

Jun 17, 2015

Discovered

Jul 29, 2015

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9f3fc6e332dc59ea2015-08-03 · +5dVerified

Name: Tremco CPG Inc.
norm: tremco cpg
Domain: tremcocpg.com

Name: Tremco CPG Inc.
norm: tremco cpg
Domain: tremcocpg.com
Industry: Manufacturingllm

Discovered: Jun 17, 2015
Breach occurred: Jun 17, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 1, 2015
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified New Hampshire Department of Justice Office of the Attorney General

During the incident: Notified the major airline on which he had flown and remained in contact with the airline in an effort to recover the laptop
Offering two years of identity protection at no cost to them
Sending a notification to all potentially affected New Hampshire residents
Changes made: Strengthening its protections for all data, in particular data stored on mobile devices to reduce the risk of loss from those devices
Implementing more robust incident response procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJul 29 · first · this page

Massachusetts State AG+5d

Pattern: first filing Jul 29 (NH), last Aug 3 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/tremco-20150729.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2015
Raw hash: 8265d047731f71df74740a0b2ebd66bc5f2b4b6291dc21be82d06d3ded83a570

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTremco CPG Inc.

Victim entityTremco CPG Inc.

Incidentdiscovered Jun 17, 2015

Stated responseNotified the major airline on which he had flown and remained in contact with the airline in an effort to recover the laptop

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov