HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Massachusetts Development Finance Agency
bd_870d69b2c9daed6b · schema v1 · pii pii-v1
Full breach record for Massachusetts Development Finance Agency →Massachusetts Development Finance Agency notified New Hampshire residents of unauthorized network access between June 17 and November 28, 2024. The incident involved viewing and copying of files containing personal information. MassDevelopment engaged forensic investigators, notified federal law enforcement, and offered credit monitoring services to affected individuals.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2ea51016ae29126fVermont State AGfiled 2025-02-28Verified
- bd_34671322dd28ba88Maryland State AGfiled 2025-02-28Candidate
- bd_66b7f9e9aadbbed2Maine State AGfiled 2025-02-28Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/massachusetts-development-finance-agency-20250228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- 9159bfb1fe801624e7f6d90b6d81e184a6dd88142b87b21273ef65760a040763
Reporting entity
- Name
- Massachusetts Development Finance Agencynorm: massachusetts development finance agency
Victim entity
- Name
- Massachusetts Development Finance Agencynorm: massachusetts development finance agency
Incident
- Discovered
- —
- Materiality determined
- Jan 29, 2024
- Notification sent
- Feb 28, 2025
- Affected individuals
- 20
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.