MisuseManufacturingManufacturingPrivilege AbuseEmployee Data InvolvedTargetedIdentity (basic)Government IDMediumActive

Nye Lubricants, Inc.

bd_6332fc003261d6fa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 15, 2008

Filed

Aug 21, 2008

To disclose

6 days

Affected · nationwide

1731 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Nye Lubricants, Inc. →

Nye Lubricants, Inc. notified New Hampshire AG Kelly Ayotte on August 22, 2008, of an insider incident where an employee accessed electronic personal information without authority on or about August 15, 2008. Up to 173 individuals were potentially affected, including one NH resident. Data included names and SSNs. The company engaged investigators, offered credit monitoring via Privacy Solutions, and is reviewing security policies.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 days

Aug 15, 2008

Begins

Aug 15, 2008

Discovered

Aug 21, 2008

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_343eb981cb729e5a2008-08-28 · +7dVerified

Name: Jackson Lewis LLP
norm: jackson lewis
Domain: nyeuniform.com

Name: Nye Lubricants, Inc.
norm: nye lubricants
Domain: nyelubricants.lookchem.com
Industry: Manufacturingllm

Discovered: Aug 15, 2008
Breach occurred: Aug 15, 2008
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 25, 2008
Affected individuals: 173state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified Attorney General of New HampshireNotified Attorneys General and other state officials and agencies as required in states where affected individuals reside
Initial access: insider_action

During the incident: Commenced an investigation
Examined its systems to determine the nature and scope of the unauthorized access
Provided a full package of credit protection services and insurance
Contacted the national credit agencies
Notified Attorneys General and other state officials and agencies
Arranged for Privacy Solutions, LLC to provide affected employees with an Identification Theft Deterrent program
Changes made: Reexamining its current data privacy and security policies and procedures to find ways of reducing the risk of future data breaches
Taking immediate steps to enhance the security of its information systems going forward
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGAug 21 · first · this page

Massachusetts State AG+7d

Pattern: first filing Aug 21 (NH), last Aug 28 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nye-lubricants-20080821.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2008
Raw hash: 2866e8b26040526471df1c05dcb06dafe9e336b44a33c54efa621159a0205ae4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJackson Lewis LLP

Victim entityNye Lubricants, Inc.

Incidentdiscovered Aug 15, 2008

Stated responseCommenced an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov