MisuseTechnologyManufacturingInformationPrivilege AbuseEmployee Data InvolvedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

LG Electronics USA Inc

bd_0ed282fa8e06a763 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 8, 2024

Filed

Oct 31, 2024

To disclose

23 days

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for LG Electronics USA Inc →

LG Electronics U.S.A., Inc. reported a data breach involving a former Payroll Manager who, on or about September 10, 2024, sent unauthorized emails containing personal information of current and former employees to a personal email account. The breach was discovered on October 8, 2024, during an investigation into the employee's resignation. Notices were sent to affected individuals on October 29, 2024. The company engaged law enforcement, pursued legal action, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 28 days

discovery → filing · 23 days

Sep 10, 2024

Begins

Oct 8, 2024

Discovered

Oct 31, 2024

Filed

vs. sector median

15 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_ce349f48ed03a51e2024-10-31Verified
Indiana State AGbd_52ec6556535295912024-10-29 · +2dVerified
Montana State AGbd_689fc8468bcc820b2024-10-29 · +2dCandidate

Name: LG Electronics USA Inc
norm: lg electronics usa

Name: LG Electronics USA Inc
norm: lg electronics usa
Industry: TechnologyllmManufacturingllm

Discovered: Oct 8, 2024
Breach occurred: Sep 10, 2024
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 29, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: Internal
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: insider_action

During the incident: Continued the investigation to determine the scope of this incident
Made multiple outreach efforts to the former employee
Pursuing legal action
Informed law enforcement of the incident
Offering impacted current and former employees of LGEUS and its affiliates of free credit monitoring services from Experian
Changes made: Reviewing additional potential technical security enhancements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 days(23 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 29 · first

Montana State AGOct 29 · first

Massachusetts State AG+2d

New Hampshire State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lg-electronics-usa-20241031.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 31, 2024
Raw hash: 4345f0d67f6540acdfdb7cdcc2fbe2bb867744dd4d8911cb2ada0442fdb3c2d3

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityLG Electronics USA Inc

Victim entityLG Electronics USA Inc

Incidentdiscovered Oct 8, 2024

Stated responseContinued the investigation to determine the scope of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov