HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
WBRC Inc
bd_88dc72208d597fb0 · schema v1 · pii pii-v1
Full breach record for WBRC Inc →WBRC Inc., a Maine-based engineering firm, notified the New Hampshire Attorney General of a security incident affecting two NH residents. Unauthorized access occurred between Feb 5 and Mar 13, 2022, exposing names and SSNs. WBRC contained the breach, notified law enforcement, and began mailing notices on May 12, 2022, offering one year of Kroll identity protection services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wbrc-20220519.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2022
- Raw hash
- 7582ea40100693a8fd11db833f987a8db24d137d8023f47703435684219f3a07
Reporting entity
- Name
- WBRC Incnorm: wbrc
- Domain
- wbrcae.com
Victim entity
- Name
- WBRC Incnorm: wbrc
- Domain
- wbrcae.com
Incident
- Discovered
- Mar 13, 2022
- Materiality determined
- —
- Notification sent
- May 12, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.