HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Directive Communication

bd_483e16a4ba0b2b5e · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 12, 2023

Filed

May 6, 2024

To disclose

25 weeks

Affected

10state residents only

Linked

4 filings

Confidence

66%

Full breach record for Directive Communication →

Directive Communication Systems Inc. notified the NH AG of a security incident where an individual accessed its platform without authorization between Nov 5-12, 2023. The breach potentially exposed PII of 10 NH residents. No evidence of actual data theft was found. DCS offered credit monitoring and is cooperating with regulators.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 25 weeks / 176 days

Nov 5, 2023

Begins

Nov 12, 2023

Discovered

May 6, 2024

Filed

vs. sector median

+6 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_00d55fa4c70eb4152024-05-03 · +3dVerified
Maine State AGbd_153363237302bad42024-05-03 · +3dCandidate
Massachusetts State AGbd_736e34d83959477f2024-05-03 · +3dVerified

Name: Directive Communication
norm: directive communication
Domain: directivecommunication.com

Name: Directive Communication
norm: directive communication
Domain: directivecommunication.com
Industry: Technologyllm

Discovered: Nov 12, 2023
Breach occurred: Nov 5, 2023
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 3, 2024
Affected individuals: 10state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney Generalreporting this matter to privacy regulatory authorities
Initial access: valid_credentials

During the incident: Launched an investigation
Implemented security measures to take prompt action against attempted unauthorized access
Offering potentially affected individuals complimentary credit monitoring services
Working diligently to locate addresses for impacted individuals
Reporting this matter to privacy regulatory authorities
Changes made: Offering potentially affected individuals complimentary credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMay 3 · first

Maine State AGMay 3 · first

Massachusetts State AGMay 3 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/directive-communication-systems-20240506.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 6, 2024
Raw hash: ebb98d7a8547a18c0a59e29213568dc2f7dd97596c1b268f8392fe0d9f3ff67c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityDirective Communication

Victim entityDirective Communication

Incidentdiscovered Nov 12, 2023

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov