HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained

Star Refining

bd_378d7ac21aec3b69 · schema v1 · pii pii-v1

Star Refining, a dental precious metal refiner, notified the New Hampshire Attorney General on July 21, 2021, of a security incident affecting 16 NH residents. On April 29, 2021, unauthorized third parties gained access to a limited number of user email accounts. The incident potentially exposed names, addresses, driver's license info, SSNs, and financial account data. Star Refining hired third-party experts, offered credit monitoring, and planned to mail notices by July 22, 2021.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

bd_d453320d22b0298aMontana State AGfiled 2021-07-22(6d gap)Candidate

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/star-refining-20210728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2021
Raw hash: 7a46702d6ec05ca0eebf6cbc698fe86ed4ed11bd76b902842582c395e3ba9ed6

Reporting entity

Name: Star Refining
norm: star refining
Domain: starrefining.com

Victim entity

Name: Star Refining
norm: star refining
Domain: starrefining.com

Incident

Discovered: Apr 29, 2021
Materiality determined: —
Notification sent: —
Affected individuals: 16
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

Compliance

Time to disclose: 13 weeks(90 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.