HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Timex Group USA, Inc.
bd_5fd1dcb0fb8d0274 · schema v1 · pii pii-v1
Full breach record for Timex Group USA, Inc. →Timex Group USA, Inc. notified New Hampshire residents of a cybersecurity incident where unauthorized access occurred between June 1 and June 5, 2023. The breach involved the exfiltration of personal information, including names and addresses. Timex engaged third-party forensic specialists, notified federal law enforcement, and provided complimentary credit monitoring through TransUnion to the 10 affected New Hampshire residents. The incident was discovered on June 5, 2023, and formal notice was sent on January 29, 2024.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2d27084a998c553dVermont State AGfiled 2024-01-29Verified
- bd_a15f9f51735d9c33Maine State AGfiled 2024-01-29Candidate
- bd_b86210de00ff4ae7Montana State AGfiled 2024-01-29Verified by operator
- bd_e6e3f203a2f904e4Indiana State AGfiled 2024-01-29Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/timex-group-usa-20240129.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 29, 2024
- Raw hash
- 6e9c11889c0d863c7b336658328c48bda5f6072abce56572b586d9e1c2d9053b
Reporting entity
- Name
- Timex Group USA, Inc.norm: timex group usa
Victim entity
- Name
- Timex Group USA, Inc.norm: timex group usa
Incident
- Discovered
- Jun 5, 2023
- Materiality determined
- —
- Notification sent
- Jan 29, 2024
- Affected individuals
- 10
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- providing written notice of this incident to relevant state regulators, as necessary, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.