HackingTechnologyInformationStolen CredentialsTargetedCustomer Data InvolvedFinancial accountIdentity (basic)LowActive

ACCUCOM

bd_52cd0bc40b393b63 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 3, 2012

Filed

Feb 22, 2012

To disclose

7 weeks

Affected

12state residents only

Confidence

66%

Full breach record for ACCUCOM →2 incidents on file

Accucom Corporation notified NH AG of a Jan 3, 2012 incident where unauthorized actors used stolen credentials to make $1.00 charges on customer payment cards. 12 NH residents affected. Investigation ongoing with Secret Service.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 50 days

Jan 3, 2012

Begins

Jan 3, 2012

Discovered

Feb 22, 2012

Filed

vs. sector median

11 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident

Name: ACCUCOM
norm: accucom
Domain: accucomig.com

Name: ACCUCOM
norm: accucom
Domain: accucomig.com
Industry: Technologyllm

Discovered: Jan 3, 2012
Breach occurred: Jan 3, 2012
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 22, 2012
Affected individuals: 12state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1530 Data from Cloud Storage Object
Threat actor: ExternalFinancial
Regulator citations: reported the situation to local authorities and the U.S. Secret Service
Initial access: valid_credentials

During the incident: Immediately changed our credentials
Made other adjustments to our security controls
Notified the local authorities, as well as the U.S. Secret Service
Sent notice of the unauthorized access to affected New Hampshire residents
Changes made: Continually evaluating and modifying our practices and the practices of our service providers, to enhance the security and privacy of all confidential and sensitive information entrusted to us
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/accucom-20120222.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2012
Raw hash: f54f07e2afd9374914a1904bd7d8ceee882d92acd56a5015be221e9429b2fde8

Reporting entityACCUCOM

Victim entityACCUCOM

Incidentdiscovered Jan 3, 2012

Stated responseImmediately changed our credentials

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov