AccidentalMisconfigurationData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
BRIGHT HORIZONS FAMILY SOLUTIONS INC.
bd_4e3ee64b000ab589 · schema v1 · pii pii-v1
Full breach record for BRIGHT HORIZONS FAMILY SOLUTIONS INC. →Bright Horizons Family Solutions, via subsidiary EasyDraft, notified New Hampshire AG of a data breach affecting 30 state residents. Between October 8, 2012, and January 8, 2014, a website hosting personal banking information (names, bank routing/account numbers) was publicly accessible due to a server misconfiguration. EasyDraft shut down the site on Jan 8, 2014, engaged forensic reviewers, and provided one year of Kroll identity protection services to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed30 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bright-horizons-20140121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 21, 2014
- Raw hash
- 1822ffdd12b27f6a18fe4911398063993787d2180d434a9ae16678995bcea6c7
Reporting entity
- Name
- MilCo Enterprises, Inc.norm: milco enterprises
Victim entity
- Name
- BRIGHT HORIZONS FAMILY SOLUTIONS INC.norm: bright horizons family
Incident
- Discovered
- Jan 8, 2014
- Materiality determined
- —
- Notification sent
- Jan 22, 2014
- Affected individuals
- 30
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Regulator citations
- Notified New Hampshire Office of the Attorney General
Compliance
- Time to disclose
- 13 days(13 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.