Social EngineeringPIIFinancial accountLow

101domain, Inc.

bd_30befd7685947ba3 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Nov 30, 2011

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for 101domain, Inc. →2 incidents on file

101domain, Inc. notified New Hampshire residents of a security breach involving a vendor's systems. A phishing attack compromised systems, potentially exposing customer personal and payment information. No direct evidence of theft was found, but unauthorized access may have occurred. The company advised customers to monitor credit reports and credit card statements.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 30, 2011

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: 101domain, Inc.
norm: 101domain
Domain: 101domain.com

Name: 101domain, Inc.
norm: 101domain
Domain: 101domain.com

Discovered: —
Materiality determined: —
Notification sent: Nov 30, 2011
Affected individuals: Not disclosed
Data types: PIIFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Passing along security expert recommendations to customers
Advising customers to monitor credit card account statements and credit reports
Advising customers to consider putting a freeze on credit reports
Advising customers to be cautious of phishing emails
Advising customers to report suspected identity theft to local law enforcement
Advising customers to obtain free credit reports
Changes made: Maintaining rigorous security practices
Offering a suite of security products to customers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/101domain-20111130.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2011
Raw hash: 21dabbea7ceb43a3d6f2be86dc74f756aaaf07908cff4c98e88f5b467bc1f1be

Reporting entity101domain, Inc.

Victim entity101domain, Inc.

IncidentPhishing

Stated responsePassing along security expert recommendations to customers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov