Research Center for Children, Youth & Families
bd_407d9f3192e62ab9 · schema v1 · pii pii-v1
Full breach record for Research Center for Children, Youth & Families →Research Center for Children, Youth & Families, Inc. (RCCYF) notified the New Hampshire Attorney General of a data security incident involving its vendor, FreeStyle Solutions. Malware was identified on FreeStyle's servers in February 2022, impacting RCCYF's online store. Unauthorized access occurred between September 18, 2020, and February 3, 2022. The incident potentially exposed New Hampshire residents' names and payment card details (number, expiration, security code). Four NH residents were notified. FreeStyle removed the malware, notified law enforcement, and coordinated with payment card brands.
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d3e72e34f4656d0eMontana State AGfiled 2022-09-21Verified
- bd_fa58b4483ae61e1dMaine State AGfiled 2022-09-19(2d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/research-center-children-youth-families-20220921.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 21, 2022
- Raw hash
- c519d88c9fe96e2bb7127e1ea2ea74c416f68d5ce3cbea58d7bd7b9ba757cedb
Reporting entity
- Name
- Research Center for Children, Youth & Familiesnorm: research center for children youth families
Victim entity
- Name
- Research Center for Children, Youth & Familiesnorm: research center for children youth families
Incident
- Discovered
- Aug 2, 2022
- Materiality determined
- —
- Notification sent
- Sep 21, 2022
- Affected individuals
- 4
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.