PhysicalTechnologyInformationTheftEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumContained

INNODATA INC

bd_69f42dacd4a97cc7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 23, 2008

Filed

Jan 5, 2009

To disclose

13 days

Affected · nationwide

1411 in this filing

Confidence

66%

Full breach record for INNODATA INC →

Innodata Isogen, Inc. reported the theft of an employee's laptop and benefit plan enrollment sheets from a car in New Jersey on December 23, 2008. The stolen items contained personal information, including Social Security numbers, dates of birth, and home addresses, for up to 141 current and former employees, including one New Hampshire resident. The company notified law enforcement, reported the incident to its General Counsel, and provided credit protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 days

Dec 23, 2008

Begins

Dec 23, 2008

Discovered

Jan 5, 2009

Filed

vs. sector median

17 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed141 affectedView incident

Name: Innodata Isogen, Inc.
norm: innodata isogen
Domain: jacksonlewis.com

Name: INNODATA INC
norm: innodata
Industry: Technologyllm

Discovered: Dec 23, 2008
Breach occurred: Dec 23, 2008
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 141state + nationwide
Data types: Government IDIdentity (basic)Employment
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified Attorney General of New Hampshire

During the incident: Filed an incident report with the Wayne Police Department
Reported the theft to the General Counsel at Innodata Isogen
Providing full package of credit protection services
Changes made: Reexamining current data privacy and security policies and procedures to find ways of reducing the risk of future data breaches
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/innodata-isogen-20090105.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 5, 2009
Raw hash: 0c95f1c9404cae98bf29495662ff6ff0a2e590fe830555c006c2104f88907880

Reporting entityInnodata Isogen, Inc.

Victim entityINNODATA INC

Incidentdiscovered Dec 23, 2008

Stated responseFiled an incident report with the Wayne Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov