PhysicalHealthcareHealthcareTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Financial accountLowActive

PFIZER INC.

bd_2fa4e0858c4cb775 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Mar 19, 2008

To disclose

—

Affected · nationwide

8003 in this filing

Linked

2 filings

Confidence

67%

Full breach record for PFIZER INC. →8 incidents on file

Pfizer Inc reported the theft of a contractor's laptop on February 7, 2008, containing personal information for approximately 800 individuals, including 3 New Hampshire residents. Data exposed included names, credit card numbers, expiration dates, addresses, phone numbers, and email addresses. No SSNs or PINs were exposed. Pfizer notified police, credit bureaus, and affected individuals, offering 2 years of credit protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 7, 2008

Begins

Mar 19, 2008

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_9780c13ebd9fb0ed2008-03-24 · +5dVerified

Name: PFIZER INC.
norm: pfizer
Domain: pfizer.com

Name: PFIZER INC.
norm: pfizer
Domain: pfizer.com
Industry: Healthcarellm

Discovered: —
Breach occurred: Feb 7, 2008
Materiality determined: —
Notification sent: —
Affected individuals: 800state + nationwide
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified the policeNotified the three major national credit reporting agencies

During the incident: Notified the police
Notified the three major national credit reporting agencies
Arranged to provide all affected individuals with the opportunity to sign-up for a full 2-year package of credit-protection services and identity theft insurance, free of charge
Planning to send notification letters to all affected individuals
Changes made: Enhance and improve data security and privacy protections
Requirements for contractor laptop security
Limits on the sensitive data that contractors can store
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMar 19 · first · this page

Massachusetts State AG+5d

Pattern: first filing Mar 19 (NH), last Mar 24 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pfizer-20080319.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2008
Raw hash: 0c4f0b72b260d10f436b20be60d575acf569a110f186edefc4df6d32f206aecf

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPFIZER INC.

Victim entityPFIZER INC.

IncidentUnauthorized Access

Stated responseNotified the police

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov