AccidentalProfessional ServicesProfessional ServicesMisconfigurationEmployee Data InvolvedPIIIdentity (basic)EmploymentFinancial accountMediumResolved

Daymon Worldwide Inc.

bd_16f725d9f87a8936 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 10, 2007

Filed

Oct 5, 2007

To disclose

25 days

Affected

1,416scope not determined

Linked

2 filings

Confidence

66%

Full breach record for Daymon Worldwide Inc. →

Daymon Worldwide Inc. notified the NH Attorney General that an employee inadvertently accessed a folder containing sensitive personally identifiable information regarding approximately 1,416 employees on September 10, 2007. The incident was caused by a misconfiguration where access restrictions were inadvertently removed when expanding access for business purposes. The company secured the files, investigated, and found no evidence of improper use or external access. Affected employees were notified on October 5, 2007.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 days

Sep 10, 2007

Discovered

Oct 5, 2007

Filed

vs. sector median

15 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_b6072f49449c2daa2007-10-09 · +4dVerified

Name: Daymon Worldwide Inc.
norm: daymon worldwide

Name: Daymon Worldwide Inc.
norm: daymon worldwide
Industry: Professional Servicesllm

Discovered: Sep 10, 2007
Materiality determined: —
Notification sent: Oct 5, 2007
Affected individuals: 1,416scope not determined
Data types: PIIIdentity (basic)EmploymentFinancial account
Attack vector: Unknown
Threat actor: Internal
Regulator citations: Notified Attorney General of the State of New Hampshire
Initial access: insider_action

During the incident: Immediately took steps to secure the files to prevent any other unauthorized access
Undertook an exhaustive investigation into the cause of the condition allowing the unauthorized access
Notified affected employees on October 5, 2007
Changes made: Set default user access rights to none
Required explicit user access rights authorized by the department head for folders containing sensitive information
Put in place an audit program for processes used in creating shared folders and granting access rights
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGOct 5 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/daymon-worldwide-20071005.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 5, 2007
Raw hash: 6ca5a7a3e7c3c059b02cfede457872c5db9bf8cc6fcc6f3c8c5d6602b5d523f7

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityDaymon Worldwide Inc.

Victim entityDaymon Worldwide Inc.

Incidentdiscovered Sep 10, 2007

Stated responseImmediately took steps to secure the files to prevent any other unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov