HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowContained

CPT Group, Inc.

bd_1b814b0da5b8cd44 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 21, 2018

To disclose

—

Affected

20state residents only

Confidence

67%

Full breach record for CPT Group, Inc. →2 incidents on file

CPT Group, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a breach involving unauthorized access to an email account containing personal information of NH residents. CPT notified 20 NH residents and offered one year of credit monitoring via Kroll. The incident involved Data Providers whose data was accessed.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jun 21, 2018

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed20 affectedView incident

Name: CPT Group, Inc.
norm: cpt group

Name: CPT Group, Inc.
norm: cpt group
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Jun 21, 2018
Affected individuals: 20state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Provided a complimentary one-year membership in credit monitoring and identity theft protection services from Kroll
Provided a telephone number for potentially affected individuals to call with any questions
Sent written notification via U.S. Mail to affected individuals
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cpt-group-20180621.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 21, 2018
Raw hash: bfe324278a1a3bc4cfad72ecb0a5b46abb6c6ae852b4cb1929debd8453df372f

Reporting entityCPT Group, Inc.

Victim entityCPT Group, Inc.

IncidentUnauthorized Access

Stated responseProvided a complimentary one-year membership in credit monitoring and identity theft protection services from Kroll

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov