HackingStolen CredentialsSkimmerCustomer Data InvolvedData ExfiltratedPCIFINANCIAL_ACCOUNTLowContained
Professional Development Resources
bd_4fd95f13b482a6a1 · schema v1 · pii pii-v1
Full breach record for Professional Development Resources →Professional Development Resources notified NH AG of a security breach affecting 22 NH residents. A digital skimmer on the company website compromised credit card data for customers between Aug 1, 2023 and Jan 5, 2024. The breach was discovered on Aug 9, 2024 via Wells Fargo alert. The attacker gained access via admin portal credential compromise. Response included patching, password resets, MFA implementation, FBI notification, and PCI scanning.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_951eb68b1963803fMaine State AGfiled 2024-09-04(2d gap)Candidate
- bd_6af07e57abca1244Indiana State AGfiled 2024-08-29(8d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/professional-development-resources-20240906.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 6, 2024
- Raw hash
- 82fff7f0e0ef725016c4f8ad6854b3c00dd37e6257ea8bc44295092773929775
Reporting entity
- Name
- Professional Development Resourcesnorm: professional development resources
- Domain
- pdresources.org
Victim entity
- Name
- Professional Development Resourcesnorm: professional development resources
- Domain
- pdresources.org
Incident
- Discovered
- Aug 9, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 22
- Data types
- PCIFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed a report with the FBI (ic3.gov)
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.