PhysicalProfessional ServicesProfessional ServicesTheftOpportunisticIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

Good News Garage - LSS Inc.

bd_3fa8d38ad3542891 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 25, 2011

Filed

Dec 14, 2011

To disclose

19 days

Affected

85state residents only

Confidence

65%

Full breach record for Good News Garage - LSS Inc. →

Good News Garage - LSS Inc. notified the NH AG that on Nov 25, 2011, a backpack containing a password-protected but unencrypted backup tape was stolen. The tape contained PHI, SSNs, driver's license numbers, and bank account info of ~85 NH residents. No evidence of misuse found. Company filed police report, engaged counsel, and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 19 days

Nov 25, 2011

Begins

Nov 25, 2011

Discovered

Dec 14, 2011

Filed

vs. sector median

16 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed85 affectedView incident

Name: Edwards Wildman Palmer LLP
norm: edwards wildman palmer

Name: Good News Garage - LSS Inc.
norm: good news garage lss
Industry: Professional Servicesllm

Discovered: Nov 25, 2011
Breach occurred: Nov 25, 2011
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 16, 2011
Affected individuals: 85state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Filed a complaint with the Barre City, Vermont Police Department
Investigated the incident
Engaged our law firm to coordinate appropriate data breach response and advise on legal obligations under applicable state laws
Prepared notices for distribution to affected individuals and governmental authorities explaining the incident
Changes made: Accelerated its efforts to encrypt portable electronic devices that contain personal information, including backup tapes and laptops
All the Company’s backup tapes are now encrypted
Began a company-wide review of its data protection policies and protocols
Offering them one year of free credit monitoring through ProtectMyID from Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/good-news-garage-20111214.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 14, 2011
Raw hash: dc824d7224ec273f4d7b36039512de4ce2af2ca510070f4cf57f080d70bd4d33

Reporting entityEdwards Wildman Palmer LLP

Victim entityGood News Garage - LSS Inc.

Incidentdiscovered Nov 25, 2011

Stated responseFiled a complaint with the Barre City, Vermont Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov