AccidentalMisdeliveryCustomer Data InvolvedDelayed DiscoveryPIIFINANCIAL_ACCOUNTLowResolved
HSBC FINANCE CORPORATION
bd_06a4665236710b67 · schema v1 · pii pii-v1
Full breach record for HSBC FINANCE CORPORATION →HSBC Finance Corporation notified the New Hampshire Attorney General of a security breach involving the accidental online exposure of customer bankruptcy data. The incident involved forms filed between May 1, 2007, and October 17, 2008, which were not fully redacted. HSBC discovered the error on July 9, 2009, and sent notification letters to affected customers in October 2009, offering one year of free credit monitoring. Affected entities included HSBC Taxpayer Financial Services, Beneficial New Hampshire, and Household Finance Corporation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hsbc-finance-20091120.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2009
- Raw hash
- 16a3e89911623cf17940b01dfde3f82c2795e20ddaed38b8c997e6a3f8da46e8
Reporting entity
- Name
- HSBC FINANCE CORPORATIONnorm: hsbc finance
Victim entity
- Name
- HSBC FINANCE CORPORATIONnorm: hsbc finance
Incident
- Discovered
- Jul 9, 2009
- Materiality determined
- —
- Notification sent
- Nov 20, 2009
- Affected individuals
- Not disclosed
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Regulator citations
- Filed security breach notification with New Hampshire Attorney General
Compliance
- Time to disclose
- 19 weeks(134 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.