HackingManufacturingManufacturingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsMediumContained

NCI Group, Inc.

bd_5ca2b80824c23f5f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 8, 2017

Filed

Sep 22, 2017

To disclose

6 weeks

Affected

3state residents only

Linked

4 filings

Confidence

67%

Full breach record for NCI Group, Inc. →

NCI Group, Inc. notified the NH Attorney General that an unknown individual accessed three employee email accounts on August 8, 2017. The accounts contained customer PII including SSNs, driver's licenses, and payment card data. 3 NH residents were notified. NCI engaged forensic investigators and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 45 days

Aug 8, 2017

Discovered

Sep 22, 2017

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_22b9837a22b5c6b62017-09-22Candidate
Massachusetts State AGbd_c798fed4bb2e84402017-09-22Verified
Massachusetts State AGbd_a9dac6d5c6c1f63e2017-10-10 · +18dVerified by operator

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: NCI Group, Inc.
norm: nci group
Industry: Manufacturingllm

Discovered: Aug 8, 2017
Materiality determined: —
Notification sent: Sep 22, 2017
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation
Engaged a leading computer forensics firm to assist
Sending written notification via U.S. regular mail
Established a dedicated call center
Changes made: Offering one year of credit monitoring services through Kroll
Taking steps to strengthen its security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 3 states

View merged incident ↗

Montana State AGSep 22 · first

Massachusetts State AGSep 22 · first

New Hampshire State AGSep 22 · first · this page

Massachusetts State AG+18d

Pattern: first filing Sep 22 (MT), last Oct 10 (MA) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nci-group-20170922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2017
Raw hash: 33a23455f010c58dbe0578179a35b3aa3e879055e54d2681fd1ea7c800aa17d9

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityBAKER & HOSTETLER LLP

Victim entityNCI Group, Inc.

Incidentdiscovered Aug 8, 2017

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov