AccidentalFinancial ServicesFinanceLossCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

GE Money Bank

bd_21ef2fd54231cf57 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Dec 28, 2007

To disclose

—

Affected

1,851state residents only

Linked

2 filings

Confidence

66%

GE Money Bank notified New Hampshire residents of a security breach involving a missing unencrypted backup tape held by storage vendor Iron Mountain. The tape contained names, addresses, SSNs, and credit card account numbers. Approximately 1,851 NH residents were affected. GE Money offered credit monitoring and enhanced account monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Dec 28, 2007

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Hawaii State AGbd_e978663467ff80ea2007-12-27 · +1dCandidate

Name: GE Money-Americas
norm: ge money americas

Name: GE Money Bank
norm: ge money bank
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jan 9, 2008
Affected individuals: 1,851state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium

During the incident: Restored the contents of that tape from the next full set
Notifying individuals via first class mail
Providing a toll-free number for them to contact us with any questions
Offering anyone whose SSN was included a free year’s credit monitoring service
Instituting enhanced internal monitoring of the accounts
Changes made: Instituted additional security measures that will prevent any future occurrences
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Hawaii State AGDec 27 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ge-money-20081228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 28, 2007
Raw hash: 1486f89df6e933334124b8c167bbd33740d791b4f923edf962282c7d6673a936

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGE Money-Americas

Victim entityGE Money Bank

IncidentThird-Party / Supply Chain

Stated responseRestored the contents of that tape from the next full set

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov