AccidentalFinancial ServicesFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Health (basic)LowResolved

Oregon Educators Benefit Board

bd_2b67eb02ad64303e · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 26, 2014

To disclose

—

Affected

49scope not determined

Confidence

67%

Full breach record for Oregon Educators Benefit Board →

Oregon Educators Benefit Board notified the NH AG of a technical error in its IT code that potentially exposed one member's benefit confirmation statement (name, DOB, address, plan info) to up to 49 individuals. Notification was sent to the affected individual on Nov 25, 2014. No SSN, financial, or PHI was disclosed. The issue was corrected.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 26, 2014

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed49 affectedView incident

Name: Oregon Educators Benefit Board
norm: oregon educators benefit board

Name: Oregon Educators Benefit Board
norm: oregon educators benefit board
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Nov 25, 2014
Affected individuals: 49scope not determined
Data types: Identity (basic)Health (basic)
Attack vector: Misconfiguration
Regulator citations: Notified Attorney General Joseph Foster

During the incident: Provided a notice to the individual
Worked with our contracted programmer to both identify and correct the problem
Taken steps to ensure it will not happen again
Recommended that the member remain vigilant by reviewing account statements and credit reports closely
Advised the member to promptly report any fraudulent activity or any suspected incidence of identity theft to proper law enforcement authorities, their state attorney general, and/or the Federal Trade Commission
Changes made: Corrected the problem that gave rise to this issue
Taken steps to ensure it will not happen again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/oregon-educators-benefit-board-20141126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2014
Raw hash: 3ad0d458a1ce3d047bd30fe1c6651aa360fb5ea6b3d82f33ab9e58b6ceac3da6

Reporting entityOregon Educators Benefit Board

Victim entityOregon Educators Benefit Board

IncidentMisconfiguration

Stated responseProvided a notice to the individual

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov