AccidentalTechnologyProfessional ServicesInformationMisconfigurationEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumResolved

Form I-9 Compliance

bd_75850232fbd36175 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 29, 2014

Filed

Jun 9, 2014

To disclose

11 days

Affected

1scope not determined

Confidence

66%

Full breach record for Form I-9 Compliance →4 incidents on file

Form I-9 Compliance reported an incident on May 29, 2014, where an internal individual accessed another employee's I-9 form without authorization due to a system error. The affected data included name, address, birth date, SSN, driver's license, phone, and email. The company corrected the system error, investigated for other occurrences, and notified the affected employee.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 11 days

May 29, 2014

Begins

May 29, 2014

Discovered

Jun 9, 2014

Filed

vs. sector median

17 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Form I-9 Compliance
norm: form i 9 compliance

Name: Form I-9 Compliance
norm: form i 9 compliance
Industry: TechnologyllmProfessional Servicesllm

Discovered: May 29, 2014
Breach occurred: May 29, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1scope not determined
Data types: Identity (basic)Government IDEmployment
Attack vector: Unknown
Threat actor: Internal
Regulator citations: Reported to the New Hampshire Attorney General

During the incident: Corrected the system error that allowed the unauthorized access
Thoroughly researched our system to be certain that no other pattern or practice of such access had occurred
Notified the employee whose record was viewed
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/form-i-9-compliance-20140609.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 9, 2014
Raw hash: 6551daa3a981b7d547813e321a7a3d2ed88cef49745da09f4d75d7b755411f5c

Reporting entityForm I-9 Compliance

Victim entityForm I-9 Compliance

Incidentdiscovered May 29, 2014

Stated responseCorrected the system error that allowed the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov