DisclosureLens
HackingFinancial ServicesGovernmentFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

New Hampshire Deferred Compensation Commission

bd_61a0193171c2da49 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 10, 2020

Filed

Nov 3, 2020

To disclose

8 weeks

Affected

4

Confidence

66%
Full breach record for New Hampshire Deferred Compensation Commission →2 incidents on file

The New Hampshire Deferred Compensation Commission reported that unknown individuals attempted to access four participant accounts between September 8 and 10, 2020, using previously obtained personal information including SSNs. The attackers successfully viewed account balances and, in two cases, phone numbers and email addresses, but no funds were stolen. Accounts were locked and participants notified.

Incident timeline

undetected · 2 days
discovery → filing · 8 weeks / 54 days

Sep 8, 2020

Begins

Sep 10, 2020

Discovered

Nov 3, 2020

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.