HackingIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
JFYNetWorks
bd_6934f7c1857689d3 · schema v1 · pii pii-v1
Full breach record for JFYNetWorks →JFYNetWorks, a Boston-based non-profit, notified the NH Attorney General on June 12, 2009, of a June 3, 2009, cyber incident. An attacker exploited a publicly accessible web application to gain unauthorized access, posting obscene messages and altering press releases. The attacker also sent emails to program applicants claiming to possess their PII, including SSNs. Six New Hampshire residents were affected. JFY disabled the site, notified law enforcement, and offered one year of Equifax credit monitoring and identity theft insurance to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed6 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/jfynetworks-20090612.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 12, 2009
- Raw hash
- 9c0438a275343a69c9ba9054e47b04f28ec5f4d59efb2bfc2d468cd8022549d7
Reporting entity
- Name
- JFYNetWorksnorm: jfynetworks
- Domain
- jfynet.org
Victim entity
- Name
- JFYNetWorksnorm: jfynetworks
- Domain
- jfynet.org
Incident
- Discovered
- Jun 3, 2009
- Materiality determined
- —
- Notification sent
- Jun 12, 2009
- Affected individuals
- 6
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the New Hampshire Attorney General's Office
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.