HackingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Janus Research Group
bd_235cd66292b281ee · schema v1 · pii pii-v1
Full breach record for Janus Research Group →Janus Research Group notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access occurred Nov 12-17, 2022, via stolen employee credentials. Name and SSN were potentially exposed. Incident discovered Nov 18, 2022. Response included forensic investigation, law enforcement notification, and 24 months of credit monitoring via Experian.
Leak gap clock⏱ Leak >30d13 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
A leak claim by donutleaks about this victim predates this filing by 82 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_57a0378d6cc1c738Leak Sitedonutleaksfiled 2022-11-24(82d gap)Verified by operator
Regulatory filings (1) · sorted by filing gap
- bd_fe3ce5d84fa3091dMontana State AGfiled 2023-02-10(4d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/janus-research-group-20230214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2023
- Raw hash
- 5f8fb80906b813c38d882fde40d13335f00dc089ae5db5cdd2b3e22687f92b80
Reporting entity
- Name
- Janus Research Groupnorm: janus research
Victim entity
- Name
- Janus Research Groupnorm: janus research
Incident
- Discovered
- Nov 18, 2022
- Materiality determined
- —
- Notification sent
- Feb 8, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcementProvided written notice to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.