HackingPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

Empathia

bd_2091bad550519a2b · schema v1 · pii pii-v1

Empathia, Inc. notified the New Hampshire Attorney General of a data event affecting 72 state residents. On January 30, 2016, spam files were discovered on a data server. The server contained personal information (names, addresses, phone numbers, SSNs) of individuals who requested credit checks in 2003-2004. No evidence of actual misuse was found, but notice was provided out of caution. Affected individuals received credit monitoring services.

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

bd_30f3bccba3dd37cdWashington State AGfiled 2016-06-06Candidate
bd_f8ed756b25c10864California State AGfiled 2016-06-06Verified
bd_9165db9cbec889b6Montana State AGfiled 2016-06-03(3d gap)Verified

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/empathia-20160606.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 6, 2016
Raw hash: 44f3ca93cdc2d2c828301dbbc91b778427564201b03e29aedf52cc2a1f965737

Reporting entity

Name: Empathia
norm: empathia
Domain: empathia.com

Victim entity

Name: Empathia
norm: empathia
Domain: empathia.com

Incident

Discovered: Jan 30, 2016
Materiality determined: —
Notification sent: Jun 3, 2016
Affected individuals: 72
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Unknown
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

Compliance

Time to disclose: 18 weeks(128 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.