HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
Frost & Sullivan
bd_407c587322cd8972 · schema v1 · pii pii-v1
Full breach record for Frost & Sullivan →Frost & Sullivan, Inc. notified New Hampshire residents of a cyber-attack discovered on July 8, 2023, which resulted in unauthorized access to systems containing employee PII. The company notified federal law enforcement, offered credit monitoring via Experian, and is implementing additional security safeguards. The investigation was ongoing at the time of notification.
Leak gap clock⏱ Leak >30d8 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by akira about this victim predates this filing by 39 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_184a8b1f0d889d98Montana State AGfiled 2023-09-05Candidate
- bd_e4520694f1251272Maine State AGfiled 2023-09-05Verified
- bd_f51afad63d17b41eVermont State AGfiled 2023-09-05Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/frost-sullivan-20230905.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 5, 2023
- Raw hash
- 0ab55bbc04146226ceabb82471c543622b7b043c2f817d0548a6e0459545130f
Reporting entity
- Name
- Frost & Sullivannorm: frost sullivan
- Domain
- frost.com
Victim entity
- Name
- Frost & Sullivannorm: frost sullivan
- Domain
- frost.com
Incident
- Discovered
- Jul 8, 2023
- Materiality determined
- —
- Notification sent
- Sep 5, 2023
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.