AccidentalTechnologyInformationMisdeliveryCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Financial accountLowResolved

Vonage

bd_6c6ecacce71bf82b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 23, 2008

To disclose

—

Affected

2state residents only

Linked

2 filings

Confidence

67%

Full breach record for Vonage →

Vonage America Inc. notified the NH Attorney General of a security breach involving a third-party vendor's telemarketing agent who recorded customer PII (names, addresses, credit card/bank details) on Google Notebook. Two NH residents were affected. Vonage removed the data, enhanced vendor oversight, and provided credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Dec 23, 2008

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_b75f8dafc51ee3832008-12-24 · +1dVerified

Name: Vonage
norm: vonage

Name: Vonage
norm: vonage
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Dec 24, 2008
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1052 Exfiltration Over Physical Medium
Threat actor: Partner
Regulator citations: Notified New Hampshire Attorney General pursuant to RSA 359-C:20
Initial access: trusted_relationship

During the incident: Removed the information from Google Notebook
Fraud team investigated the incident
Required third party vendors to provide description of methodology for detecting data leaks
Blocked access to websites including Google Notebook for third party vendors
Provided one year of credit monitoring service to affected residents
Changes made: Required third party vendors to provide description of methodology for detecting data leaks
Blocked access to a number of websites including Google Notebook for third party vendors
Working with third party vendors to increase the security of personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGDec 23 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/vonage-20081223.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2008
Raw hash: cebfe5641bf05b1aedfbb511824be294193b712bd21482fb1055fffc6216ba08

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityVonage

Victim entityVonage

IncidentThird-Party / Supply Chain

Stated responseRemoved the information from Google Notebook

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov