PhysicalTechnologyInformationTheftSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

GOOGLE LLC

bd_42e428c93d0ca8b3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 24, 2008

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for GOOGLE LLC →4 incidents on file

Google notified New Hampshire residents of a data breach involving the theft of computer equipment from third-party benefits administrator Colt Express Outsourcing Services, Inc. The incident occurred on May 26, 2008, and involved personal information of employees and dependents hired before December 31, 2005. Affected data included names, Social Security numbers, birthdates, addresses, and hire dates. Google engaged Kroll Inc. to provide one year of credit monitoring and identity theft restoration services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

May 26, 2008

Begins

Jun 24, 2008

Filed

This filing is one of 2 about the same incident.View merged incident

Part of Colt Express Outsourcing Services, Inc. supply-chain incident (2008) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7fa1706e901c30b02008-06-27 · +3dVerified

Name: GOOGLE LLC
norm: google
Domain: google.com

Name: GOOGLE LLC
norm: google
Domain: google.com
Industry: Technologyllm

Discovered: —
Breach occurred: May 26, 2008
Materiality determined: —
Notification sent: Jun 9, 2008
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Third party: via Colt Express Outsourcing Services, Inc.

During the incident: Engaged Kroll Inc. to provide ID TheftSmart service
Sent notification letters to affected residents
Changes made: Offered one year of complimentary credit monitoring and identity theft restoration services through Kroll
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 24 · first · this page

Massachusetts State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/google-20080624.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 24, 2008
Raw hash: 3f28931b6bd1f982de931bb524e959a1d124eace351174064a3721ac638e2d25

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGOOGLE LLC

Victim entityGOOGLE LLC

IncidentThird-Party / Supply Chain

Stated responseEngaged Kroll Inc. to provide ID TheftSmart service

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov