HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountCredentialsCriticalActive

Trion Worlds, Inc.

bd_44f066f2a75c8976 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Dec 21, 2011

Filed

Dec 21, 2011

To disclose

≤1 day

Affected · nationwide

3,300,0004,731 in this filing

Linked

2 filings

Confidence

65%

Full breach record for Trion Worlds, Inc. →

Trion Worlds, Inc. notified the NH AG that unauthorized intruders accessed an account database. Approximately 3.3 million accounts were affected, including 4,731 in NH. Data included usernames, encrypted passwords, DOB, email, billing address, and credit card info (full numbers encrypted by processor). Notification to NH residents was scheduled for Dec 22, 2011.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · ≤1 day / 0 days

Dec 21, 2011

Discovered

Dec 21, 2011

Filed

vs. sector median

18 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_e4f8b20ce83214852011-12-21Verified

Name: LATHAM & WATKINS LLP
norm: latham watkins

Name: Trion Worlds, Inc.
norm: trion worlds
Industry: Technologyllm

Discovered: Dec 21, 2011
Materiality determined: —
Notification sent: Dec 22, 2011
Affected individuals: 3,300,000state + nationwide
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Working with external security experts to review its security
Taken further action to strengthen its systems
Preparing to notify all New Hampshire residents affected by the unauthorized access by e-mail
Taking steps to ensure users change their existing Trion account passwords
Changes made: Requiring users to change their password
Requiring Mobile Authenticator users to reconnect their Authenticator
Prompting users to provide a new password, security questions and answers
Giving the option to connect account to Mobile Authenticator to enhance security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGDec 21 · first

New Hampshire State AGDec 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/trion-worlds-20111221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2011
Raw hash: def25c995366efa328d44b580ae4b843ce6bc1dc6fd7e9d9a12903d8c2ee0678

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLATHAM & WATKINS LLP

Victim entityTrion Worlds, Inc.

Incidentdiscovered Dec 21, 2011

Stated responseWorking with external security experts to review its security

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov