HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Water For People
bd_328e5b2385a6a76d · schema v1 · pii pii-v1
Full breach record for Water For People →Water For People notified the NH AG of a security breach discovered on Dec 15, 2023, involving unauthorized access to computer systems. 26 NH residents were affected, with potential access to personal information. The organization engaged forensic investigators, secured systems, and offered credit monitoring. Notification was sent on Sep 5, 2024.
Leak gap clock✗ Leak >180d38 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
A leak claim by medusa about this victim predates this filing by 265 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1f8df32e54c704c8Vermont State AGfiled 2024-09-05Verified
- bd_2f77e69a7542f2f8Montana State AGfiled 2024-09-05Candidate
- bd_8937325be8132141Indiana State AGfiled 2024-09-05Verified
- bd_fcdf66f98c82eef3Washington State AGfiled 2024-09-05Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/water-people-20240905.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 5, 2024
- Raw hash
- 2f64ca41a0d22e553c8cf4feb9d5cf3a188cb9df2003db0dc06551b0d230a7ff
Reporting entity
- Name
- Water For Peoplenorm: water for people
- Domain
- waterforpeople.org
Victim entity
- Name
- Water For Peoplenorm: water for people
- Domain
- waterforpeople.org
Incident
- Discovered
- Dec 15, 2023
- Materiality determined
- —
- Notification sent
- Sep 5, 2024
- Affected individuals
- 26
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Compliance
- Time to disclose
- 38 weeks(265 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.