Social EngineeringTechnologyInformationPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Volt Information Sciences, Inc.

bd_0a6e8a9b7edc3f7d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 16, 2018

Filed

Feb 19, 2019

To disclose

18 weeks

Affected

2state residents only

Linked

3 filings

Confidence

66%

Full breach record for Volt Information Sciences, Inc. →

Volt Information Sciences, Inc. notified the NH AG of a phishing incident affecting 2 NH residents. Unauthorized access to employee email accounts occurred between Aug 6 and Oct 4, 2018. Exposed data included names and SSNs. Volt secured accounts, engaged forensic investigators, and offered 1 year of Kroll credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 71 days

discovery → filing · 18 weeks / 126 days

Aug 6, 2018

Begins

Oct 16, 2018

Discovered

Feb 19, 2019

Filed

vs. sector median

+7 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_33fc40c77e1e6c0b2019-02-15 · +4dVerified
California State AGbd_3b7982ad8afe1b882019-02-15 · +4dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Volt Information Sciences, Inc.
norm: volt information sciences
Industry: Technologyllm

Discovered: Oct 16, 2018
Breach occurred: Aug 6, 2018 – Oct 4, 2018
Undetected for: 71 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 15, 2019
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Changed the affected users' email credentials
Securing the email accounts
Retained a leading forensic investigation firm to assist with Volt's investigation
Providing potentially impacted individuals with notice of this event
Offering access to credit monitoring and identity theft protection services for one (1) year through Kroll
Changes made: Working to implement additional safeguards to protect the security of information
Reviewing our existing policies and procedures
Implementing additional technology tools and training to prevent or detect similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 weeks(126 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 15 · first

California State AGFeb 15 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/volt-information-sciences-20190219.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 19, 2019
Raw hash: 206d7a3fa03a504ea77f04ec489e715320a678bafaafeffbd76d3a24e11dab61

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityVolt Information Sciences, Inc.

Incidentdiscovered Oct 16, 2018

Stated responseChanged the affected users' email credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov