MisuseTelecom & MediaInformationPrivilege AbuseDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Verizon Wireless

bd_420aca0fcdcc1ead · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2008

Filed

Apr 22, 2008

To disclose

7 weeks

Affected

Not disclosed

Confidence

65%

Verizon Wireless notified New Hampshire residents that a former telesales employee accessed customer records between November 2003 and January 2005. The employee, charged with identity theft in New Jersey, viewed names, addresses, SSNs, and account numbers. Verizon discovered the incident in March 2008, modified systems to restrict SSN access, and provided one year of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1582 days

discovery → filing · 7 weeks / 52 days

Nov 1, 2003

Begins

Mar 1, 2008

Discovered

Apr 22, 2008

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Verizon Wireless
norm: verizon wireless
Domain: verizon.com

Name: Verizon Wireless
norm: verizon wireless
Domain: verizon.com
Industry: Telecom & Mediallm

Discovered: Mar 1, 2008
Breach occurred: Nov 1, 2003 – Jan 31, 2005
Undetected for: 1,582 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 25, 2008
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office Consumer Protection BureauCooperating with Somerset County, New Jersey Prosecutor's office
Initial access: insider_action

During the incident: Partnered with ConsumerInfo.com, Inc, an Experian company, to provide credit monitoring service for 1 year
Changed systems so that they no longer allow a telesales employee to access a customer's full social security number after that number has been submitted for an initial credit check
Cooperating with prosecutors handling this investigation
Changes made: Changed systems so that they no longer allow a telesales employee to access a customer's full social security number after that number has been submitted for an initial credit check
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/verizon-20080422.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2008
Raw hash: 9935574254e9eed8df7636463a0dd90dccf29daf723664914a560f3d6efc244f

Reporting entityVerizon Wireless

Victim entityVerizon Wireless

Incidentdiscovered Mar 1, 2008

Stated responsePartnered with ConsumerInfo.com, Inc, an Experian company, to provide credit monitoring service for 1 year

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov