PhysicalManufacturingRetail & ConsumerManufacturingTheftSupply Chain (3P Vendor)Employee Data InvolvedIdentity (basic)Government IDEmploymentHighContained

Nestle Waters North America, Inc.

bd_4aef8dc43250ea4c · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 11, 2008

Filed

Feb 26, 2008

To disclose

15 days

Affected · nationwide

8,24561 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Nestle Waters North America, Inc. →

Nestle Waters North America Inc. notified the NH Attorney General that a third-party vendor, Systematic Automation Inc., experienced a break-in on Feb 11, 2008, resulting in the theft of a desktop computer containing unencrypted employee benefits statements. The data included names, dates of birth, and SSNs for approximately 8,245 employees, including 61 New Hampshire residents. NWNA provided credit monitoring and reviewed security protocols.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 days

Feb 11, 2008

Begins

Feb 11, 2008

Discovered

Feb 26, 2008

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_94a859c6b6a4f7a92008-02-27 · +1dVerified

Name: Nestle Waters North America, Inc.
norm: nestle waters north america
Domain: www.nestiewatersnorthamerica.com

Name: Nestle Waters North America, Inc.
norm: nestle waters north america
Domain: www.nestiewatersnorthamerica.com
Industry: ManufacturingllmRetail & Consumerllm

Discovered: Feb 11, 2008
Breach occurred: Feb 11, 2008
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 26, 2008
Affected individuals: 8,245state + nationwide
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Department of Justice

During the incident: Notified the New Hampshire Attorney General
Sent initial notification by email to affected employees
Posted notification in all NWNA locations
Working with Equifax to set up an emergency response program
Providing 12 months of free credit monitoring services
Providing option of a security freeze on credit reports
Establishing a toll-free information hotline
Reviewing current data security protocols
Reviewing vendor data security protocols
Changes made: Reviewing current data security protocols
Reviewing vendor data security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGFeb 26 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nestle-waters-20080226.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 26, 2008
Raw hash: d31e5674093095948c1f7a7219a6e4cf82a65fdd8cfce3739ada757650fbdc1b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNestle Waters North America, Inc.

Victim entityNestle Waters North America, Inc.

Incidentdiscovered Feb 11, 2008

Stated responseNotified the New Hampshire Attorney General

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov