HackingManufacturingManufacturingStolen CredentialsTargetedIdentity (basic)Government IDMediumContained

Habasit America, Inc.

bd_30b2ed52ad779d42 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 24, 2022

Filed

Jul 5, 2022

To disclose

23 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Habasit America, Inc. →

Habasit America, Inc. notified the New Hampshire Attorney General of a data event affecting one NH resident. Unauthorized access occurred between Dec 1, 2021, and Jan 24, 2022. Data involved names and SSNs. Habasit engaged forensic specialists, notified law enforcement, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 54 days

discovery → filing · 23 weeks / 162 days

Dec 1, 2021

Begins

Jan 24, 2022

Discovered

Jul 5, 2022

Filed

vs. sector median

+12 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_165af548dc4e94f52022-07-01 · +4dVerified
Indiana State AGbd_8515ccebac48970f2022-07-01 · +4dVerified

Name: Habasit America, Inc.
norm: habasit america

Name: Habasit America, Inc.
norm: habasit america
Industry: Manufacturingllm

Discovered: Jan 24, 2022
Breach occurred: Dec 1, 2021 – Jan 24, 2022
Undetected for: 54 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 1, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcementNotifying other relevant regulatory authorities, as required
Initial access: valid_credentials

During the incident: Took steps to secure its network
Engaged third-party forensic specialists to assist with the investigation
Notified federal law enforcement regarding the incident
Provided access to credit monitoring services for twelve (12) months, through Kroll, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Notifying other relevant regulatory authorities, as required
Changes made: Instituted additional security measures to better protect against future similar incidents
Reviewing and enhancing its existing policies and procedures related to data protection and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(162 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 1 · first

Indiana State AGJul 1 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/habasit-america-20220705.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2022
Raw hash: ab6f23e29ab3abfee46ae5fdd181ef506810b69f8952bfa38da7d2c27976b520

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHabasit America, Inc.

Victim entityHabasit America, Inc.

Incidentdiscovered Jan 24, 2022

Stated responseTook steps to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov