HackingGovernment IDIdentity (basic)MediumContained

Provisur Technologies, Inc.

bd_17bc20678cfab8ef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 22, 2021

Filed

Aug 20, 2021

To disclose

29 days

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Provisur Technologies, Inc. →2 incidents on file

Provisur Technologies, Inc. notified the New Hampshire Attorney General of a security incident involving unauthorized access to its file servers between May 25 and June 5, 2021. The breach affected one New Hampshire resident, whose name and Social Security number were potentially accessed. Provisur secured the systems, conducted an investigation, and sent notification to the affected individual on August 20, 2021, offering one year of credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 58 days

discovery → filing · 29 days

May 25, 2021

Begins

Jul 22, 2021

Discovered

Aug 20, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_92b8276b2b5204e82021-08-20Verified
Indiana State AGbd_aa82152a4fb9beae2021-08-20Verified
Montana State AGbd_ff987baec08670b92021-08-20Candidate

Name: Provisur Technologies, Inc.
norm: provisur technologies

Name: Provisur Technologies, Inc.
norm: provisur technologies

Discovered: Jul 22, 2021
Breach occurred: May 25, 2021 – Jun 5, 2021
Undetected for: 58 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 20, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Secured the systems involved
Commenced an investigation
Reviewed the files to identify individuals whose information may have been accessible
Providing written notice via United States Postal Service First Class mail to the New Hampshire resident
Offering the eligible individual a complimentary one-year membership in credit monitoring and identity theft protection services through Experian
Established a dedicated, toll-free call center
Changes made: Implementing additional security measures to enhance the security of its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGAug 20 · first

Indiana State AGAug 20 · first

Montana State AGAug 20 · first

New Hampshire State AGAug 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/provisur-technologies-20210820.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2021
Raw hash: ecbb9aa11afac34caad1f6a2499d9442a85d5cf921fe9b53ee045edf71825686

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityProvisur Technologies, Inc.

Victim entityProvisur Technologies, Inc.

Incidentdiscovered Jul 22, 2021

Stated responseSecured the systems involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov