HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMediumContained

PSS World Medical, Inc.

bd_40bb64906cd7c78a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 15, 2008

To disclose

—

Affected

116state residents only

Confidence

68%

Full breach record for PSS World Medical, Inc. →2 incidents on file

PSS World Medical, Inc. notified the New Hampshire Attorney General on September 15, 2008, of unauthorized access to its career board website. The incident potentially exposed personal information, including names, addresses, dates of birth, driver's license numbers, and Social Security numbers, of approximately 116 New Hampshire residents. The company stated there was no evidence the information was misused and offered free Equifax Credit Watch to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 15, 2008

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed116 affectedView incident

Name: PSS World Medical, Inc.
norm: pss world medical

Name: PSS World Medical, Inc.
norm: pss world medical
Industry: Retail & Consumerllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 116state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Taken steps to enhance security procedures
Arranged Equifax Credit Watch at no charge
Changes made: Enhanced security procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pss-world-medical-20080915.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2008
Raw hash: 03d0f166e83dc67b65aeab32ad96c8d18578d4499f2da285382f505cf3b6470d

Reporting entityPSS World Medical, Inc.

Victim entityPSS World Medical, Inc.

IncidentUnauthorized Access

Stated responseTaken steps to enhance security procedures

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov