Social EngineeringManufacturingManufacturingPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumActive

CORNING INCORPORATED

bd_16b7a99d619f710c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 12, 2019

Filed

Apr 12, 2019

To disclose

4 weeks

Affected

1state residents only

Confidence

66%

Full breach record for CORNING INCORPORATED →

Corning Incorporated notified the NH AG of a breach affecting one NH resident. An employee email account acquired via Corning was spoofed on Jan 29, 2019. Discovered March 12, 2019. Data included names, addresses, emails, and SSNs. Corning reset passwords, hired forensics, offered 12 months credit monitoring, and implemented 2FA and email filtering.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 42 days

discovery → filing · 4 weeks / 31 days

Jan 29, 2019

Begins

Mar 12, 2019

Discovered

Apr 12, 2019

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: CORNING INCORPORATED
norm: corning
Domain: corning.com

Name: CORNING INCORPORATED
norm: corning
Domain: corning.com
Industry: Manufacturingllm

Discovered: Mar 12, 2019
Breach occurred: Jan 29, 2019
Undetected for: 42 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 12, 2019
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Regulator citations: Providing notice of this event to other state and federal regulators as appropriate
Initial access: phishing_link

During the incident: Corning took steps to block access to the account by resetting passwords
Hired a leading forensics firm to help investigate
Conducted an extensive programmatic and manual review of the emails and attachments
Mailing written notice to affected consumers and certain regulators
Arranged to have Experian provide the affected individuals twelve (12) months of credit monitoring and identity restoration services at no cost
Changes made: Re-educating employees on cyber best practices
Implementing two-factor authentication for remote email access for these accounts
Implemented a forced password reset protocol across all affected systems
Removed all outside access to the accounts at issue
Subscribes to an email security program for inbound and outbound filtering and blocking of emails potentially containing personally identifiable information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/corning-20190412.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2019
Raw hash: 75b0cd763e8d9ff1f33a46481b16edec8bf2e6201cc87f6b7390020737fb91f6

Reporting entityCORNING INCORPORATED

Victim entityCORNING INCORPORATED

Incidentdiscovered Mar 12, 2019

Stated responseCorning took steps to block access to the account by resetting passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov