HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedFinancial accountCredentialsLowContained

ACE Surgical Supply Co., Inc.

bd_71b446eea2ff2a0e · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 15, 2015

Filed

Sep 15, 2015

To disclose

≤1 day

Affected

13state residents only

Confidence

67%

Full breach record for ACE Surgical Supply Co., Inc. →3 incidents on file

ACE Surgical Supply Co., Inc. notified the NH Attorney General that an information security incident possibly involved 13 NH residents. Suspicious files were discovered during a routine server review. Credit card info and/or account passwords were compromised. Notifications were mailed on Sept 4, 2015, with 1 year of identity monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · ≤1 day / 0 days

Sep 15, 2015

Discovered

Sep 15, 2015

Filed

vs. sector median

8 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed13 affectedView incident

Name: Proskauer Rose LLP
norm: proskauer rose

Name: ACE Surgical Supply Co., Inc.
norm: ace surgical supply
Industry: Retail & Consumerllm

Discovered: Sep 15, 2015
Materiality determined: —
Notification sent: Sep 4, 2015
Affected individuals: 13state-resident count only
Data types: Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Joseph Foster
Initial access: valid_credentials

During the incident: Hired RSA, the Security Division of EMC, to assist in the investigation
Mailed written notification to the thirteen (13) New Hampshire residents
Offering these residents one year of complimentary identity monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ace-surgical-supply-20150915.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2015
Raw hash: 7eac8c79b9c76ed60bd24d764a3bbf46aaa2a3ec3e6e9523a1b6aa202cfce236

Reporting entityProskauer Rose LLP

Victim entityACE Surgical Supply Co., Inc.

Incidentdiscovered Sep 15, 2015

Stated responseHired RSA, the Security Division of EMC, to assist in the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov