UnknownCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Hettich Instruments

bd_0f1f398ca66f4e33 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 3, 2022

Filed

Nov 8, 2022

To disclose

5 weeks

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Hettich Instruments →

Hettich Instruments notified the NH Attorney General of a data security incident discovered on October 3, 2022, which disrupted access to computer systems. On October 19, 2022, the company learned that personal information of one New Hampshire resident may have been impacted. The affected data included name, address, date of birth, and Social Security number. Hettich engaged forensic experts, secured its systems, and offered 12 months of credit monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 36 days

Oct 3, 2022

Discovered

Nov 8, 2022

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9ab96f2419a042022022-11-09 · +1dVerified

Name: Hettich Instruments
norm: hettich instruments

Name: Hettich Instruments
norm: hettich instruments

Discovered: Oct 3, 2022
Materiality determined: —
Notification sent: Nov 4, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Notified New Hampshire Attorney General

During the incident: Took immediate steps to secure its systems
Promptly launched an investigation
Engaged independent digital forensics and incident response experts to assist with the response and investigation
Changes made: Implemented additional security features in its environment to reduce the risk of a similar incident occurring in the future
Retained IDX, a company specializing in credit and identity monitoring services, to offer complimentary privacy and identity theft protection for 12 months to those with impacted Social Security numbers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGNov 8 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hettich-instruments-20221108.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 8, 2022
Raw hash: e7a1585247391d2fb09f2d7422b5424f9fb5a23e4ebae813883e304d93b4f8e4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHettich Instruments

Victim entityHettich Instruments

Incidentdiscovered Oct 3, 2022

Stated responseTook immediate steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov