HackingStolen CredentialsCapture Stored DataCustomer Data InvolvedData ExfiltratedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALSMediumContained
Self Esteem Brands, LLC
bd_80ed207d3d6f0c9a · schema v1 · pii pii-v1
Full breach record for Self Esteem Brands, LLC →Self Esteem Brands, LLC notified the NH Attorney General of a security incident where an unauthorized actor accessed employee email accounts and server files between Dec 2023 and June 2024. The breach affected 6 NH residents, exposing PII, government IDs, financial data, and health info. The company engaged forensic investigators, notified law enforcement, and offered 1 year of credit monitoring.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_7e6c29488896605fCalifornia State AGfiled 2024-12-20Candidate
- bd_f133c7f5a01fadaeVermont State AGfiled 2024-12-20Candidate
- bd_449efc28b3d2e54eVermont State AGfiled 2025-02-05(47d gap)Verified
- bd_f56833f3df66d569California State AGfiled 2025-02-05(47d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/self-esteem-brands-20241220.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 20, 2024
- Raw hash
- e1b25089d129de2cec9d0a7621475b61a606b24eda64d9726365cd943e8edec9
Reporting entity
- Name
- Self Esteem Brands, LLCnorm: self esteem brands
Victim entity
- Name
- Self Esteem Brands, LLCnorm: self esteem brands
Incident
- Discovered
- Jun 6, 2024
- Materiality determined
- Nov 26, 2024
- Notification sent
- Dec 20, 2024
- Affected individuals
- 6
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email CollectionT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(197 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.