HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
XEROX CORPORATION
bd_51420a231f7657a9 · schema v1 · pii pii-v1
Full breach record for XEROX CORPORATION →Xerox Business Services experienced unauthorized network access in early December 2023, confirmed to have occurred on December 10, 2023. The incident compromised the name, contact information, and Social Security number of one New Hampshire resident. Xerox reset credentials, engaged forensic experts, notified law enforcement, and offered credit monitoring.
Leak gap clock⏱ Leak >30d12 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by inc_ransom about this victim predates this filing by 53 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (2)
- bd_55e7cb7170b6d652Leak Siteinc_ransomfiled 2024-04-10(50d gap)Verified
- bd_f543da30300cffb2Leak Siteinc_ransomfiled 2023-12-29(53d gap)Verified
Regulatory filings (1) · sorted by filing gap
- bd_da77cfecd7f01119Maine State AGfiled 2024-02-20Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/xerox-corporation-20240220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 20, 2024
- Raw hash
- 7a77a8855c04a008a6d8ef6227522f9b9db01e9698b1f7e6c5c98e8d6342e0a3
Reporting entity
- Name
- XEROX CORPORATIONnorm: xerox
- Domain
- xerox.com
Victim entity
- Name
- XEROX CORPORATIONnorm: xerox
- Domain
- xerox.com
Incident
- Discovered
- Dec 1, 2023
- Materiality determined
- —
- Notification sent
- Feb 20, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General
Compliance
- Time to disclose
- 12 weeks(81 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.