AccidentalProfessional ServicesProfessional ServicesMisdeliveryCustomer Data InvolvedGovernment IDIdentity (basic)FinancialMediumResolved

SCI Shared Resources

bd_34125fe686588cf1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 2, 2021

Filed

Mar 4, 2021

To disclose

4 weeks

Affected

14state residents only

Linked

4 filings

Confidence

66%

Full breach record for SCI Shared Resources →

SCI Shared Resources, LLC notified the New Hampshire Attorney General of a data security incident involving 14 NH residents. On or about January 28, 2021, 2020 Forms 1099-NEC were inadvertently mailed to the wrong vendor due to a sorting error. The company discovered the error on February 2, 2021, and sent notification letters on March 4, 2021. Affected data included business names, taxpayer identification numbers (SSN/EIN), and compensation amounts. SCI provided free credit monitoring and identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

discovery → filing · 4 weeks / 30 days

Jan 28, 2021

Begins

Feb 2, 2021

Discovered

Mar 4, 2021

Filed

vs. sector median

13 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_7142fbe030eff4ef2021-03-04Verified
Indiana State AGbd_956e3ada06cd97e02021-03-04Verified
Maine State AGbd_ec2bffd1d6f728dc2021-03-04Candidate

Name: SCI Shared Resources
norm: sci shared resources

Name: SCI Shared Resources
norm: sci shared resources
Industry: Professional Servicesllm

Discovered: Feb 2, 2021
Breach occurred: Jan 28, 2021
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 4, 2021
Affected individuals: 14state-resident count only
Data types: Government IDIdentity (basic)Financial
Data elements: Social Security number
Attack vector: Unknown

During the incident: Sent a follow-up letter to the unintended recipients, asking them to destroy the incorrectly addressed Form 1099-NEC
Sending letters by U.S. mail to affected Vendors
Arranged for ID Experts to provide identity protection services including credit monitoring at no charge to affected Vendors
Reviewing its processes and procedures in order to prevent a similar occurrence from happening in the future
Changes made: Reviewing its processes and procedures in order to prevent a similar occurrence from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 4 · first

Indiana State AGMar 4 · first

Maine State AGMar 4 · first

New Hampshire State AGMar 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sci-shared-resources-20210304.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 4, 2021
Raw hash: 5a170b079080c5958c6ee8abb7172719be89d1f9bbb30438ce9fcdde9e4a8a74

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySCI Shared Resources

Victim entitySCI Shared Resources

Incidentdiscovered Feb 2, 2021

Stated responseSent a follow-up letter to the unintended recipients, asking them to destroy the incorrectly addressed Form 1099-NEC

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov