HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
BankCard USA Merchant Services, Inc
bd_4f2c40775af300e8 · schema v1 · pii pii-v1
Full breach record for BankCard USA Merchant Services, Inc →BankCard USA Merchant Services Inc. reported unauthorized access to computer systems between May 31 and June 1, 2023, discovered on June 1, 2023. The incident affected 31 New Hampshire residents, exposing PII including SSNs and financial account numbers. The company engaged forensic specialists, notified law enforcement, and offered credit monitoring via Equifax.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_020a7dc8bee3b655California State AGfiled 2023-08-16Verified
- bd_5498a0e6f7f9db4eMontana State AGfiled 2023-08-16Candidate
- bd_8246dfd6459bcc1fVermont State AGfiled 2023-08-16Verified
- bd_b5cf7e9b23c6174eMaine State AGfiled 2023-08-16Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bankcard-usa-merchant-services-20230816.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2023
- Raw hash
- 2d57db625783962bc4725f5052f5d86071421f1d8478fc05f29429dfda3a0fbe
Reporting entity
- Name
- BankCard USA Merchant Services, Incnorm: bankcard usa merchant
Victim entity
- Name
- BankCard USA Merchant Services, Incnorm: bankcard usa merchant
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- Jul 14, 2023
- Notification sent
- Aug 16, 2023
- Affected individuals
- 31
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(76 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.