HackingTechnologyProfessional ServicesInformationData ExfiltratedCustomer Data InvolvedPIIEmploymentLowActive

Worldwide TechServices

bd_6c1f9ff27ab904bb · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 16, 2023

Filed

May 4, 2023

To disclose

7 weeks

Affected

3state residents only

Linked

6 filings

Confidence

66%

Full breach record for Worldwide TechServices →

Worldwide TechServices notified the NH AG of unauthorized copying of files from its network occurring around Feb 16, 2023. Confirmed March 16, 2023. Affected ~3 NH residents with HR data. Investigation ongoing. Notified law enforcement, offering 12 months credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 28 days

discovery → filing · 7 weeks / 49 days

Feb 16, 2023

Begins

Mar 16, 2023

Discovered

May 4, 2023

Filed

vs. sector median

4 wks faster

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_0795ab71d26f7aa62023-05-01 · +3dVerified
Maine State AGbd_23eb4ffd5fe619302023-05-01 · +3dCandidate
Massachusetts State AGbd_30c659d326403ab12023-05-01 · +3dVerified
Indiana State AGbd_a9bbd4e5392238522023-05-01 · +3dVerified

Show 1 more filing ↓up to 3d gap

Montana State AGbd_f6633695621ae6512023-05-01 · +3dVerified

Name: Worldwide TechServices
norm: worldwide techservices

Name: Worldwide TechServices
norm: worldwide techservices
Industry: TechnologyllmProfessional Servicesllm

Discovered: Mar 16, 2023
Breach occurred: Feb 16, 2023
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 1, 2023
Affected individuals: 3state-resident count only
Data types: PIIEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Began an investigation to assess the scope of the event, the security of its systems, and identify potentially affected individuals
Notified federal law enforcement regarding the event
Evaluating additional safeguards to mitigate risk of reoccurrence
Providing access to credit monitoring for twelve (12) months, through Experian, to individuals whose information was potentially affected by this event, at no cost to these individuals
Providing potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this event to relevant state regulators and consumer reporting agencies Equifax, Experian and TransUnion, as necessary
Changes made: Evaluating additional safeguards to mitigate risk of reoccurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGMay 1 · first

Maine State AGMay 1 · first

Massachusetts State AGMay 1 · first

Indiana State AGMay 1 · first

Montana State AGMay 1 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/worldwide-techservices-20230504.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 4, 2023
Raw hash: 83240279d24fb0fd1ee14747c1e7ab5af8b8248b8078b16f1ec1638b4b8465eb

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityWorldwide TechServices

Victim entityWorldwide TechServices

Incidentdiscovered Mar 16, 2023

Stated responseBegan an investigation to assess the scope of the event, the security of its systems, and identify potentially affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov