HackingStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPIIMediumContained
THERMO FISHER SCIENTIFIC INC.
bd_1168372279c84dfa · schema v1 · pii pii-v1
Full breach record for THERMO FISHER SCIENTIFIC INC. →Thermo Fisher Scientific notified California residents that unauthorized third parties compromised a small percentage of company email accounts between July 6, 2017, and October 13, 2017. The attackers obtained usernames and passwords to access accounts and acquire emails. Affected data may include names and Social Security numbers contained in those emails. The company engaged outside experts, worked with federal law enforcement, secured accounts, and offered 12 months of identity monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_25dcf9248193907aMontana State AGfiled 2018-03-30Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-134909
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 30, 2018
- Raw hash
- 5bce29a4af77f0f9c95960b9e1b31f053914ef7c6ef0c5bd39d8498c674630fd
Reporting entity
- Name
- THERMO FISHER SCIENTIFIC INC.norm: thermo fisher scientific
Victim entity
- Name
- THERMO FISHER SCIENTIFIC INC.norm: thermo fisher scientific
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Jul 28, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Working closely with federal law enforcement authoritiesLaw enforcement authorities requested that the company delay making any notification of this incident
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.