AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Nationwide Retirement Solutions, Inc.

bd_112a047dc4a8abd3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 13, 2019

Filed

Dec 2, 2019

To disclose

19 days

Affected

1state residents only

Confidence

67%

Full breach record for Nationwide Retirement Solutions, Inc. →4 incidents on file

Nationwide Retirement Plans notified the NH AG of an internal processing error on Nov 13, 2019, where one NH resident's PII (name, SSN) was inadvertently disclosed to another plan's participants. Notification sent Nov 27, 2019. No evidence of misuse. Free credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 days

Nov 13, 2019

Discovered

Dec 2, 2019

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Nationwide Retirement Solutions, Inc.
norm: nationwide retirement
Domain: nationwide.com

Name: Nationwide Retirement Solutions, Inc.
norm: nationwide retirement
Domain: nationwide.com
Industry: Financial Servicesllm

Discovered: Nov 13, 2019
Materiality determined: —
Notification sent: Nov 27, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1074 Data Staged
Regulator citations: Notified New Hampshire Attorney General

During the incident: Reviewed our systems configuration and our related procedures and put additional safeguards in place to prevent this type of event from reoccurring
Offering free credit monitoring to allow you direct access to monitoring activity on all your credit accounts
Extending to you free Equifax Credit Watch Gold with 3-in-1 monitoring identity theft protection product for one year
Changes made: Reviewed our systems configuration and our related procedures and put additional safeguards in place to prevent this type of event from reoccurring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nationwide-20191202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 2, 2019
Raw hash: d6c1666c549f063e730cd1718524d8f1a7d1edab96acc8deaad6aac95ba9e801

Reporting entityNationwide Retirement Solutions, Inc.

Victim entityNationwide Retirement Solutions, Inc.

Incidentdiscovered Nov 13, 2019

Stated responseReviewed our systems configuration and our related procedures and put additional safeguards in place to prevent this type of event from reoccurring

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov