HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

SEDGWICK CLAIMS MANAGEMENT SERVICES, INC.

bd_15f7e486c7d3c4a3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 8, 2013

Filed

May 6, 2013

To disclose

28 days

Affected

1state residents only

Confidence

65%

Full breach record for SEDGWICK CLAIMS MANAGEMENT SERVICES, INC. →7 incidents on file

Sedgwick Claims Management Services, Inc. notified the NH Attorney General that an unauthorized party accessed the name, SSN, and employee ID of one New Hampshire resident claimant on April 8, 2013, via a sophisticated attack on a desktop computer linked to an advertisement on a search site. Sedgwick notified the individual and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Apr 8, 2013

Begins

Apr 8, 2013

Discovered

May 6, 2013

Filed

vs. sector median

13 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Sedgwick Claims Management Services, Inc.
norm: sedgwick claims management services

Name: SEDGWICK CLAIMS MANAGEMENT SERVICES, INC.
norm: sedgwick claims management
Industry: Professional Servicesllm

Discovered: Apr 8, 2013
Breach occurred: Apr 8, 2013
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 6, 2013
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney General
Initial access: phishing_link

During the incident: Engaged in a thorough review of this incident
Notified the claimant whose information may have been disclosed
Offered one year of complimentary credit monitoring through Experian
Changes made: Continually refining privacy and security programs and incident response procedures
Regularly training employees
Conducting annual privacy assessments
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sedgwick-claims-20130506.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 6, 2013
Raw hash: 744c3bf55df74a8480518226d1e89c65e29749c665c58513f28fce77aa4fd6d5

Reporting entitySedgwick Claims Management Services, Inc.

Victim entitySEDGWICK CLAIMS MANAGEMENT SERVICES, INC.

Incidentdiscovered Apr 8, 2013

Stated responseEngaged in a thorough review of this incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov