MisuseTechnologyManufacturingInformationPrivilege AbuseEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumResolved

EXCELITAS TECHNOLOGIES CORP.

bd_4bb0be44a884490b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2014

Filed

Jun 19, 2014

To disclose

13 days

Affected · nationwide

1916 in this filing

Linked

2 filings

Confidence

66%

Full breach record for EXCELITAS TECHNOLOGIES CORP. →

Excelitas Technologies Corp. notified the NH Attorney General of an incident where an employee made an unauthorized copy of a payroll file containing personal information of 191 employees (6 NH residents). The incident stemmed from legacy permissions on a server folder. The employee was terminated, and Excelitas reset permissions and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 97 days

discovery → filing · 13 days

Mar 1, 2014

Begins

Jun 6, 2014

Discovered

Jun 19, 2014

Filed

vs. sector median

9 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_ab2d3a912d57f79c2014-06-18 · +1dVerified

Name: EXCELITAS TECHNOLOGIES CORP.
norm: excelitas technologies
Domain: excelitas.com

Name: EXCELITAS TECHNOLOGIES CORP.
norm: excelitas technologies
Domain: excelitas.com
Industry: TechnologyllmManufacturingllm

Discovered: Jun 6, 2014
Breach occurred: Mar 1, 2014 – Apr 30, 2014
Undetected for: 97 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 17, 2014
Affected individuals: 191state + nationwide
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid AccountsT1005 Data from Local System
Threat actor: Internal
Regulator citations: Notified NH Attorney General Joseph Foster
Initial access: insider_action

During the incident: Shut off unrestricted access immediately
Formed a team of HR and IT personnel to conduct an internal investigation
Reviewed existing security permissions with respect to the folder at issue and generally with respect to all finance and human resource data containing personal information
Scanned the network and personal computers in production for copies of payroll file in question
Interviewed employees who had access to the payroll file
Confiscated the floppy disk containing the personal information
Terminated the employee who made the unauthorized copy
Addressed affected employees in person and by senior management
Provided written notice to affected employees
Changes made: Performed a full reset of all permissions with respect to the impacted folder and all finance and human resource data and information
Conducted subsequent reviews to ensure that the restrictions function properly
Spoken with lower level employees about proper escalation of such issues in the future
Developing a means to communicate the procedure for escalating similar security incidents and will deploy the same to staff in the near future
Offering credit monitoring services from LifeLock or paying for credit security freezes for a period of one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJun 18 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/excelitas-technologies-20140619.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 19, 2014
Raw hash: 7279e6e943b6fe66448b12d96e55bb2abf9ec33ffc3c8890cb96b2931b83600f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEXCELITAS TECHNOLOGIES CORP.

Victim entityEXCELITAS TECHNOLOGIES CORP.

Incidentdiscovered Jun 6, 2014

Stated responseShut off unrestricted access immediately

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov