Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
TOSHIBA GLOBAL COMMERCE SOLUTIONS, INC.
bd_40f63b1b3f26723f · schema v1 · pii pii-v1
Full breach record for TOSHIBA GLOBAL COMMERCE SOLUTIONS, INC. →Toshiba Global Commerce Solutions, Inc. notified the New Hampshire Attorney General of a security incident affecting 3 NH residents. Unauthorized access to email accounts occurred between Dec 4, 2023 and Mar 18, 2024, likely via phishing. Names and SSNs were exposed. Toshiba secured the tenant, notified residents on July 23, 2024, and offered identity monitoring.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5e965060c58a6178Montana State AGfiled 2024-07-23Candidate
- bd_c2f6f51ed70a6967Maine State AGfiled 2024-07-23Verified
- bd_df5a4802f115f2cdIndiana State AGfiled 2024-07-23Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/toshiba-global-commerce-solutions-20240723.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 23, 2024
- Raw hash
- 0e25c4f26136e03793d79faad8d5b95f83e0999e7ea658c0a3d5475c06f6db07
Reporting entity
- Name
- TOSHIBA GLOBAL COMMERCE SOLUTIONS, INC.norm: toshiba global commerce
- Domain
- toshibacommerce.com
Victim entity
- Name
- TOSHIBA GLOBAL COMMERCE SOLUTIONS, INC.norm: toshiba global commerce
- Domain
- toshibacommerce.com
Incident
- Discovered
- Jun 10, 2024
- Materiality determined
- —
- Notification sent
- Jul 23, 2024
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(43 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.