HackingFinancial ServicesTechnologyFinanceStolen CredentialsData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

EXPERIAN SERVICES CORP.

bd_689f48c1c1b47308 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 3, 2014

To disclose

—

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for EXPERIAN SERVICES CORP. →28 incidents on file

Experian notified the NH Attorney General on Nov 3, 2014, regarding unauthorized access to personal information of 2 NH residents. The incident occurred Oct 20-21, 2014, involving a client (Merchants Capital Access) accessing consumer data (SSN, DOB, account numbers) without authorization. Experian locked the user ID, implemented security measures, and provided 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 20, 2014

Begins

Nov 3, 2014

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_45b62575a205c6522014-11-20 · +17dCandidate

Name: Experian North America
norm: experian north america
Domain: experian.com

Name: EXPERIAN SERVICES CORP.
norm: experian services
Domain: experian.com
Industry: Financial ServicesllmTechnologyllm

Discovered: —
Breach occurred: Oct 20, 2014 – Oct 21, 2014
Materiality determined: —
Notification sent: Nov 3, 2014
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Office of the Attorney General - New Hampshire
Third party: via Merchants Capital Access
Initial access: valid_credentials

During the incident: Userid associated with this unauthorized activity has been locked
Requiring additional corrective actions that may include but are not limited to: updated system security measures, the issuance of a new userid, and enhanced access restrictions
Actively working with Merchants Capital Access and law enforcement to investigate this matter
Providing two years of complimentary credit monitoring and report through Experian’s ProtectMyID Elite product
Changes made: Updated system security measures
Issuance of a new userid
Enhanced access restrictions
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

New Hampshire State AGNov 3 · first · this page

New Hampshire State AG+17d

Pattern: first filing Nov 3 (NH), last Nov 20 (NH) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/experian-20141103.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 3, 2014
Raw hash: 021293353fc277a9d3dbec12514eddf732cb2b833f09ac03c76a62acc4449de3

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityExperian North America

Victim entityEXPERIAN SERVICES CORP.

IncidentThird-Party / Supply Chain

Stated responseUserid associated with this unauthorized activity has been locked

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov