HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDFinancial accountMediumActive

Solera Holdings, Inc.

bd_18872179e85ba7a0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 13, 2017

Filed

Mar 31, 2017

To disclose

18 days

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Solera Holdings, Inc. →3 incidents on file

Solera Holding, Inc. notified New Hampshire AG of a data breach impacting employees. Discovered March 13, 2017 after IRS flagged fraudulent tax returns. W-2 data (names, SSNs, wages) likely compromised via a third-party vendor (UltiPro). FBI notified. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Mar 13, 2017

Discovered

Mar 31, 2017

Filed

vs. sector median

8 wks faster

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Oregon State AGbd_18cb77ac76c90bdd2017-04-07 · +7dCandidate
New Hampshire State AGbd_59ddc743f7e570c52017-04-13 · +13dVerified

Name: OGLETREE, DEAKINS, NASH, SMOAK & STEWART, P.C.
norm: ogletree deakins nash smoak stewart

Name: Solera Holdings, Inc.
norm: solera holdings
Industry: Technologyllm

Discovered: Mar 13, 2017
Materiality determined: —
Notification sent: Mar 31, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Contacted the FBI and reported this incidentNotified individual states attorney generals in states of impacted employees
Initial access: valid_credentials

During the incident: Formed an incident management team consisting of senior representatives from IT, legal, internal audit and human resources
Contacted the FBI and reported this incident
Conferred with our payroll vendor with access to employee personal information to examine its processes and any potential data compromise
Notified individual states attorney generals in states of impacted employees
Offering a complimentary two-year membership of EXPERIAN IDENTITYWORKS
Changes made: IT department thoroughly reviewed Solera's data protection procedures
Scanned/analyzed all relevant systems, files and email communications
Working with applicable vendor partners to evaluate whether the suspected data compromise may have occurred in a system external to Solera, including Solera's human resources information system provider, Ultimate Software (UltiPro)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 31 · first · this page

Oregon State AG+7d

New Hampshire State AG+13d

Pattern: first filing Mar 31 (NH), last Apr 13 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/solera-holding-20170331.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2017
Raw hash: ef8c4d7075e380ca4df15ef66b8d9b6f66c8fce99cf0139ab799afc60c0c8cc1

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityOGLETREE, DEAKINS, NASH, SMOAK & STEWART, P.C.

Victim entitySolera Holdings, Inc.

Incidentdiscovered Mar 13, 2017

Stated responseFormed an incident management team consisting of senior representatives from IT, legal, internal audit and human resources

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov