Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainPIIIDENTITY_BASICCREDENTIALSLowContained
Community HousingWorks
bd_0eb93848c1eeca4d · schema v1 · pii pii-v1
Full breach record for Community HousingWorks →Community HousingWorks notified the NH AG of a data event affecting 1 NH resident. On Dec 22, 2023, suspicious activity in employee email accounts was detected, indicating unauthorized access likely via phishing. The investigation concluded on July 12, 2024. Affected data included personal information. CHW engaged forensic specialists, notified law enforcement, enhanced security protocols, and offered credit monitoring via CyberScout.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_40901cad4e43acdbMontana State AGfiled 2024-10-07Candidate
- bd_4f190d732f207300California State AGfiled 2024-10-07Verified
- bd_7feff9d5582d0d97Indiana State AGfiled 2024-10-07Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/community-housingworks-20241007.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 7, 2024
- Raw hash
- 1687ce9db6cfe86c20fff3cffcd8ede47ef7faaf75f7efb25bdc8685a553a230
Reporting entity
- Name
- Community HousingWorksnorm: community housingworks
- Domain
- chworks.org
Victim entity
- Name
- Community HousingWorksnorm: community housingworks
- Domain
- chworks.org
Incident
- Discovered
- Dec 22, 2023
- Materiality determined
- Jul 12, 2024
- Notification sent
- Oct 7, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICCREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcementproviding written notice of this incident to relevant state regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- phishing_link
Compliance
- Time to disclose
- 41 weeks(290 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.