AccidentalMisdeliveryCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
World Bank Open Data
bd_8288cbb4d4582965 · schema v1 · pii pii-v1
Full breach record for World Bank Open Data →On November 21, 2008, The World Bank mistakenly posted a payment record file containing names and bank account numbers of employees and contractors on a public site. The file was accessed once and subsequently removed. The incident involved approximately 3 New Hampshire residents. The Bank provided two years of complimentary credit monitoring and identity theft insurance to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/world-bank-20081202.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 2, 2008
- Raw hash
- edbe3f0bffe0079d0d963a71ba61b1514bac8628c85b25476a228fb11e7f4d04
Reporting entity
- Name
- World Bank Open Datanorm: world bank open data
- Domain
- data.worldbank.org
Victim entity
- Name
- World Bank Open Datanorm: world bank open data
- Domain
- data.worldbank.org
Incident
- Discovered
- Nov 21, 2008
- Materiality determined
- —
- Notification sent
- Dec 3, 2008
- Affected individuals
- 3
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- Internal
Compliance
- Time to disclose
- 11 days(11 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.