HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedPIIIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Phase II Systems
bd_7c2b65795edf6bd6 · schema v1 · pii pii-v1
Full breach record for Phase II Systems →Phase II Systems dba PARS reported a data breach affecting approximately 10,000 individuals. The incident involved unauthorized access to a public-facing web application via an unpatched vulnerability, resulting in the exfiltration of personal information including names, addresses, and Social Security numbers. The company engaged forensic investigators, notified law enforcement, and offered credit monitoring services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4b31bd974995f04fCalifornia State AGfiled 2024-08-29(5d gap)Candidate
- bd_8a77e6fdc10b4ce5Indiana State AGfiled 2024-08-28(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/phase-ii-systems-pars-20240903.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 3, 2024
- Raw hash
- 0ed95ca5deab3a8642d1a4488c4c9093134091c7248b8bd4bc03ea3eb5058f17
Reporting entity
- Name
- Phase II Systemsnorm: phase ii
Victim entity
- Name
- Phase II Systemsnorm: phase ii
Incident
- Discovered
- Aug 26, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 10,000
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with New Hampshire Office of the Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.