UnknownHealthcareHealthcareEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Zai Lab (US) LLC

bd_32ccab2065c8fa1f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 28, 2023

Filed

Dec 26, 2023

To disclose

28 days

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Zai Lab (US) LLC →

Zai Lab (US) LLC notified the New Hampshire Attorney General of a data security incident discovered on November 28, 2023, affecting current and former employees. The incident impacted limited portions of the IT environment, potentially exposing names, contact info, SSNs, driver's license/passport numbers, and financial account information. One New Hampshire resident was affected. The company resecured systems, reset passwords, and offered two years of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 days

Nov 28, 2023

Discovered

Dec 26, 2023

Filed

vs. sector median

7 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_4f23a15ab34fa6a52023-12-22 · +4dVerified
Indiana State AGbd_d50f2bfd7fdab9232023-12-22 · +4dCandidate

Name: Zai Lab (US) LLC
norm: zai lab us

Name: Zai Lab (US) LLC
norm: zai lab us
Industry: Healthcarellm

Discovered: Nov 28, 2023
Materiality determined: —
Notification sent: Dec 22, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified New Hampshire Attorney General

During the incident: Initiated an investigation to understand the scope of the matter
Resecured our IT systems
Restored operations to all critical IT systems
Performed certain password resets
Implemented other additional defensive measures
Offering a complimentary two-year membership of Experian’s IdentityWorks
Changes made: Strengthened the security of our networks
Implemented additional defensive measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGDec 22 · first

Indiana State AGDec 22 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/zai-lab-us-20231226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 26, 2023
Raw hash: 4350b5cc2c787ff249834acfde6588598b251e994532578a5e16a853bb7dbc82

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityZai Lab (US) LLC

Victim entityZai Lab (US) LLC

Incidentdiscovered Nov 28, 2023

Stated responseInitiated an investigation to understand the scope of the matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov