HackingStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedPIIIDENTITY_BASICLowContained
GC Services
bd_8725b4ef8674e1b3 · schema v1 · pii pii-v1
Full breach record for GC Services →GC Services, a debt collection provider, notified the NH Attorney General of a data security incident affecting at least one New Hampshire resident. Unauthorized access occurred between Sept 11-20, 2023, discovered Dec 26, 2023. Personal information was potentially acquired. GC Services engaged external cybersecurity experts, notified the FBI, and offered credit monitoring.
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_3f8368515ad2e05cMaine State AGfiled 2024-01-25Candidate
- bd_af38af1c89b59797Montana State AGfiled 2024-01-25Verified
- bd_c4f44f2ed5304f06Indiana State AGfiled 2024-01-25Verified
- bd_459779589b5e856cNew Hampshire State AGfiled 2024-01-30(5d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 27d gap
- bd_4eed0dc1feab88d6Vermont State AGfiled 2024-01-30(5d gap)Verified
- bd_fc32c57d58703479Maine State AGfiled 2024-01-30(5d gap)Verified
- bd_cff61c307f536256Maine State AGfiled 2024-02-21(27d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gc-services-20240125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 25, 2024
- Raw hash
- da87a895de0672791f59f97783a6e517748f8f61874728cedf404d82c415d74b
Reporting entity
- Name
- GC Servicesnorm: gc services
Victim entity
- Name
- GC Servicesnorm: gc services
Incident
- Discovered
- Dec 26, 2023
- Materiality determined
- —
- Notification sent
- Jan 25, 2024
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigationcontinue to offer assistance in their investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.