HackingProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPIIMediumResolved

NTS Holding Corporation

bd_7d9924e5b48d0a50 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 5, 2021

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

72%

Full breach record for NTS Holding Corporation →

NTS Holding Corporation discovered a data security incident on November 2, 2020, in which an unauthorized actor gained access to certain NTS systems and files stored on their network. While it could not be confirmed whether information was accessed or viewed, a forensic review completed March 17, 2021 identified that affected files may have contained names, SSNs, financial account information, and dates of birth. NTS implemented additional remote access controls, performed a global password reset, and notified law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 2, 2020

Begins

Aug 5, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_011f043e446b7b382021-08-05Verified
Indiana State AGbd_31683bb5fc69d95f2021-08-05Verified
Montana State AGbd_b4cf0e29eff6bb552021-08-05Verified
Massachusetts State AGbd_43b23361c4b8c6172021-08-03 · +2dVerified

Show 1 more filing ↓up to 4d gap

New Hampshire State AGbd_27842660347d6d9d2021-08-09 · +4dVerified

Name: NTS Holding Corporation
norm: nts holding

Name: NTS Holding Corporation
norm: nts holding

Discovered: —
Breach occurred: Nov 2, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Engaged an independent computer forensic investigator to help determine what occurred and whether any information was at risk
Initiated business continuity protocols
Conducted a thorough review of the contents of the files
Notified and are cooperating with law enforcement
Implemented additional controls for all types of remote access to our systems
Performed a global password reset
Arranged for affected individuals to receive credit monitoring and identity protection services at no cost
Changes made: Implemented additional controls for all types of remote access to our systems
Performed a global password reset
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGAug 3 · first

Maine State AG+2d

Indiana State AG+2d

Montana State AG+2d

California State AG+2d · this page

New Hampshire State AG+6d

Pattern: first filing Aug 3 (MA), last Aug 9 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-543615
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 5, 2021
Raw hash: a5f618378723fcd59ef36c6366d42a7203b07e99f6a37bdad5bf48a860566dd9

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityNTS Holding Corporation

Victim entityNTS Holding Corporation

IncidentUnauthorized Access

Stated responseEngaged an independent computer forensic investigator to help determine what occurred and whether any information was at risk

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov