PhysicalTechnologyInformationTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Biolase, Inc.

bd_3c39ec90debaf083 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 4, 2007

Filed

Jun 19, 2007

To disclose

15 days

Affected

3state residents only

Confidence

66%

Full breach record for Biolase, Inc. →2 incidents on file

Biolase Technology, Inc. notified the NH AG that a laptop containing employee names and SSNs was stolen from its accountant, BDO Seidman, LLP, between May 4-14, 2007. Biolas learned of the breach on June 4, 2007. Notices were sent to affected individuals on June 15, 2007. 3 NH residents were affected. Equifax credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 31 days

discovery → filing · 15 days

May 4, 2007

Begins

Jun 4, 2007

Discovered

Jun 19, 2007

Filed

vs. sector median

17 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Biolase, Inc.
norm: biolase
Domain: biolase.com

Name: Biolase, Inc.
norm: biolase
Domain: biolase.com
Industry: Technologyllm

Discovered: Jun 4, 2007
Breach occurred: May 4, 2007 – May 14, 2007
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 15, 2007
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Law enforcement officials were contacted and have been investigating this crime
BDO retained a full backup of the information on the laptop
BDO has arranged with Equifax Personal Solutions to help you protect your identity and your credit information at no cost to you
Enroll in Equifax Credit Watch Gold with 3-in-1 Monitoring identity theft protection service
Changes made: BDO has assured us that it is updating and changing its procedures to prevent this type of incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/biolase-20080619.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2007
Raw hash: 9e2995835fc741ae783aec7e3c2085bb57fd555c23e596f5fa652b0b4a6539b0

Reporting entityBiolase, Inc.

Victim entityBiolase, Inc.

Incidentdiscovered Jun 4, 2007

Stated responseLaw enforcement officials were contacted and have been investigating this crime

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov