HackingCustomer Data InvolvedPIILowContained

Summit Marketing

bd_77c4ef5ce3aa687f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 18, 2022

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for Summit Marketing →

Summit c/o Array Marketing Inc. notified the NH Attorney General of a data security incident where an unauthorized person accessed their computer system on October 13, 2021, to interfere with operations. The incident was quickly contained. An investigation determined that personal information of one New Hampshire resident may have been involved. The company implemented remediation measures including EDR deployment, enhanced encryption, and 24/7 monitoring, and offered 12 months of identity monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 13, 2021

Begins

Apr 18, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Summit Marketing
norm: summit marketing
Domain: summitmarketing.com

Name: Summit Marketing
norm: summit marketing
Domain: summitmarketing.com

Discovered: —
Breach occurred: Oct 13, 2021
Materiality determined: —
Notification sent: Feb 23, 2022
Affected individuals: 1state-resident count only
Data types: PII
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, Consumer Protection Bureau, New Hampshire

During the incident: Contained the incident through action by Information Technology team and independent cyber security experts
Conducted a comprehensive investigation with cyber-security experts
Retained a security expert to implement a multiphase series of best practices
Changes made: Deployment of endpoint detection and response software throughout their environment
Enhancing encryption
Increasing technological safeguard their email environment
Developing disaster recovery and building continuity plans
Ensuring there is 24/7 monitoring in place
Offering a complimentary 12-month membership of Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/summit-array-20220418.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 18, 2022
Raw hash: 063fed0a15863b67aa15317522bd78c7818e785e5bb30b8ce360475e640d3d3c

Reporting entitySummit Marketing

Victim entitySummit Marketing

IncidentUnauthorized Access

Stated responseContained the incident through action by Information Technology team and independent cyber security experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov