HackingTechnologyHealthcareFinancial ServicesInformationStolen CredentialsEmployee Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumActive

Global Growth

bd_0fc35283f13377be · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2020

Filed

Dec 31, 2020

To disclose

4 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Global Growth →

Global Growth Holdings, Inc. reported that an unauthorized third party gained access to an HR employee's email account on December 1, 2020. The company discovered the compromise on the same day via Microsoft Office 365 alerts. The attacker may have downloaded personal information of current and former employees and their dependents, including names, SSNs, bank account numbers, driver's license numbers, passport numbers, and medical history. One New Hampshire resident was affected. The company terminated access, re-imaged the affected laptop, and is implementing multi-factor authentication. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 30 days

Dec 1, 2020

Begins

Dec 1, 2020

Discovered

Dec 31, 2020

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_fec855cdad89a9562020-12-31Verified

Name: Global Growth
norm: global growth
Domain: globalgrowth.com

Name: Global Growth
norm: global growth
Domain: globalgrowth.com
Industry: TechnologyllmHealthcarellmFinancial Servicesllm

Discovered: Dec 1, 2020
Breach occurred: Dec 1, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 1, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Terminated the unauthorized third-party's access
Changed the credentials of the employee whose account was accessed
Took possession of her laptop and re-imaged it to ensure there was no malware on the computer
Analyzed its logs to verify that the unauthorized third parties were no longer in the system
Continues to monitor system logs for alerts and unusual activity in its e-mail system
Changes made: Implementing multi-factor authentication to increase the security of its password-protected systems
Improving its internal security protocols to detect and avoid similar attacks in the future
Will update policies and procedures, as needed, to prevent or mitigate similar future events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGDec 31 · first

New Hampshire State AGDec 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/global-growth-holdings-20201231.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 31, 2020
Raw hash: 280f63513ebec5e0cc86fde289170124f0aad15c8cd3ca650187c765cd3ee236

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGlobal Growth

Victim entityGlobal Growth

Incidentdiscovered Dec 1, 2020

Stated responseTerminated the unauthorized third-party's access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov