HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)CredentialsCriticalActive

LivingSocial

bd_83a52a4dc14b2b86 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Apr 12, 2013

Filed

Apr 26, 2013

To disclose

14 days

Affected

29,000,000

Linked

2 filings

Confidence

64%

Full breach record for LivingSocial →

LivingSocial, Inc. notified New Hampshire AG of a security incident where intruders used compromised credentials to access systems starting April 5, 2013. Data exposed included names, emails, DOBs, and hashed passwords for at least 29 million Americans. LivingSocial reset passwords, notified users, and engaged forensic firms GuidePoint Security and Navigant.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 14 days

Apr 5, 2013

Begins

Apr 12, 2013

Discovered

Apr 26, 2013

Filed

vs. sector median

17 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_7116f7564a2cd57e2013-04-26Candidate

Name: Sidley Austin LLP
norm: sidley austin

Name: LivingSocial
norm: livingsocial
Domain: livingsocial.com
Industry: Technologyllm

Discovered: Apr 12, 2013
Breach occurred: Apr 5, 2013
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 26, 2013
Affected individuals: 29,000,000nationwide
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Provided information to various state attorneys generalProvided information to the United Kingdom’s Information Commissioner’s Office
Initial access: valid_credentials

During the incident: Forced a reset of all consumer passwords
Sending email notice to LivingSocial customers
Posted extensive FAQs with information regarding identity theft and fraud protection
Continuing to actively review this incident and its processes with the support of GuidePoint Security and Navigant
Mandated two-factor authentication for VPN access
Reconfigured the relevant firewall rules to blacklist the active hosts
Elevated its monitoring for malicious IP addresses, VPN, and privileged account use
Changes made: Mandated two-factor authentication for VPN access
Reconfigured the relevant firewall rules to blacklist the active hosts
Elevated its monitoring for malicious IP addresses, VPN, and privileged account use
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGApr 26 · first

New Hampshire State AGApr 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/living-social-20130426.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 26, 2013
Raw hash: fd40baec286c71443c155e13babff4ebda19a2bf1af588e82ca6da83cfb844cf

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySidley Austin LLP

Victim entityLivingSocial

Incidentdiscovered Apr 12, 2013

Stated responseForced a reset of all consumer passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov