PhysicalTechnologyInformationTheftEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentHighContained

Primedia, Inc. now known as RentPath, Inc.

bd_89c4d4f67a73b2e8 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 20, 2012

Filed

May 31, 2013

To disclose

49 weeks

Affected · nationwide

56,00075 in this filing

Linked

2 filings

Confidence

66%

Full breach record for Primedia, Inc. now known as RentPath, Inc. →

Primedia, Inc. (now RentPath, Inc.) reported the theft of computer hardware containing backup storage devices by an independent contractor on June 20, 2012. Forensic analysis of the stolen device revealed personally identifiable information, including Social Security numbers, for approximately 56,000 employees, former employees, and applicants. The company offered credit monitoring and identity restoration services to affected individuals. The incident is classified as physical theft of devices.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 49 weeks / 345 days

Jun 20, 2012

Begins

Jun 20, 2012

Discovered

May 31, 2013

Filed

vs. sector median

+31 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_37b90724b1e3f1d42013-07-01 · +31dCandidate

Name: Primedia, Inc. now known as RentPath, Inc.
norm: primedia
Domain: wilsonelser.com

Name: Primedia, Inc. now known as RentPath, Inc.
norm: primedia inc now known as rentpath
Industry: Technologyllm

Discovered: Jun 20, 2012
Breach occurred: Jun 20, 2012
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 23, 2013
Affected individuals: 56,000state + nationwide
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: InternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralNotified Consumer Reporting Agencies

During the incident: Terminated the independent contractor
Filed a police report with the Gwinnett County Police Department
Conducted an internal investigation including reviewing security tapes and card access records
Retained FishNet Security to recover data and assist in determining whether PII was included
Engaged Kroll Advisory Solutions to provide breach response services
Provided continuous credit monitoring and enhanced identity theft consultation and restoration services through Kroll
Notified Consumer Reporting Agencies
Changes made: Increasing the security of its data storage devices
Encrypting data
Increasing physical security at its facilities
Updating its data retention policies
Reviewing and updating its procedures for hiring independent contractors to incorporate additional security checks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 49 weeks(345 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

New Hampshire State AGMay 31 · first · this page

New Hampshire State AG+31d

Pattern: first filing May 31 (NH), last Jul 1 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/primedia-rentpath-20130531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2013
Raw hash: 670242c9ac1062171d623a2e10347c078d5be7a07cfbe0f92fe7bb09e1a1d5fe

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPrimedia, Inc. now known as RentPath, Inc.

Victim entityPrimedia, Inc. now known as RentPath, Inc.

Incidentdiscovered Jun 20, 2012

Stated responseTerminated the independent contractor

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov