HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

EmPower HR

bd_716d0370610980f0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 30, 2020

Filed

Jan 8, 2021

To disclose

10 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%

Full breach record for EmPower HR →

EmPower HR notified the New Hampshire Attorney General of a security incident where an unauthorized party accessed systems between Sept 29 and Oct 30, 2020. One NH resident's name and SSN were exposed. Notification was mailed Jan 7, 2021, offering one year of credit monitoring. EmPower HR engaged cybersecurity consultants and implemented additional safeguards.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 31 days

discovery → filing · 10 weeks / 70 days

Sep 29, 2020

Begins

Oct 30, 2020

Discovered

Jan 8, 2021

Filed

vs. sector median

9 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Massachusetts State AGbd_439ef05818bfea652021-01-07 · +1dVerified
Indiana State AGbd_9634af3d0b7646052021-01-07 · +1dVerified
Maine State AGbd_ccac9b35e2fdc4662021-01-07 · +1dCandidate
Illinois State AGbd_6fe884ce16435d452021-01-01 · +7dVerified

Name: BAKER & HOSTETLER LLP
norm: baker hostetler

Name: EmPower HR
norm: empower hr
Domain: empowerhr.com
Industry: Professional Servicesllm

Discovered: Oct 30, 2020
Breach occurred: Sep 29, 2020 – Oct 30, 2020
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 7, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified law enforcement
Initial access: valid_credentials

During the incident: Took steps to secure its systems
Launched an investigation
Notified law enforcement
Mailed a notification letter to the New Hampshire resident
Offered the individual one year of complimentary credit monitoring services
Working with expert cybersecurity consulting firms
Implemented additional solutions to further safeguard and monitor its systems
Changes made: Working with expert cybersecurity consulting firms
Implemented additional solutions to further safeguard and monitor its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(70 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Illinois State AGJan 1 · first

Massachusetts State AG+6d

Indiana State AG+6d

Maine State AG+6d

New Hampshire State AG+7d · this page

Pattern: first filing Jan 1 (IL), last Jan 8 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/empower-hr-20210108.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 8, 2021
Raw hash: 8aa0a0683a111f8bcc2a4e55759b363e31411144ad4a1ebc4011a4ad1b1a5e95

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBAKER & HOSTETLER LLP

Victim entityEmPower HR

Incidentdiscovered Oct 30, 2020

Stated responseTook steps to secure its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov