MisuseTechnologyInformationPrivilege AbuseEmployee Data InvolvedIdentity (basic)Government IDMediumContained

UPS

bd_094a7ae994baf712 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 1, 2007

Filed

Jun 8, 2007

To disclose

18 weeks

Affected

142state residents only

Confidence

67%

Full breach record for UPS →4 incidents on file

UPS reported unauthorized access to employee data by a former UPS employee in February 2007. The insider downloaded names, SSNs, employee IDs, and job status info to a local computer. 142 New Hampshire employees were notified in June 2007. No evidence of misuse was found, but notifications were sent as a precaution.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 weeks / 127 days

Feb 1, 2007

Discovered

Jun 8, 2007

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed142 affectedView incident

Name: UPS
norm: ups

Name: UPS
norm: ups
Industry: Technologyllm

Discovered: Feb 1, 2007
Materiality determined: —
Notification sent: Jun 11, 2007
Affected individuals: 142state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Reported breach to New Hampshire Attorney General pursuant to RSA 359-C:20(1)(b)
Initial access: insider_action

During the incident: Initiated a comprehensive forensic investigation of the incident
Notified affected individuals of the incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(127 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ups-20070608.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 8, 2007
Raw hash: 9d33e285af8e696aaa6215ab3c979e2301f1d1c89419079fc91d977321618db9

Reporting entityUPS

Victim entityUPS

Incidentdiscovered Feb 1, 2007

Stated responseInitiated a comprehensive forensic investigation of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov