PhysicalGovernmentGovernmentTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDCredentialsBiometricPHIHealth (basic)HighActive

Town of Concord

bd_8e17cff9887e19b7 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Sep 22, 2021

To disclose

—

Affected

4,705state residents only

Linked

3 filings

Confidence

66%

Full breach record for Town of Concord →3 incidents on file

The Town of Concord reported the theft of hard drives containing personal information. The drives were discovered missing on October 17, 2019, during a routine equipment replacement. This supplemental notice identifies 4,705 additional New Hampshire residents affected. Data potentially exposed includes names, addresses, Social Security numbers, driver's license numbers, biometric data, and health information. The Town engaged forensic experts, notified law enforcement, and provided credit monitoring to affected individuals. The investigation remains ongoing.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 17, 2019

Begins

Sep 22, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_9943e59c373d1b0d2021-09-17 · +5dVerified
Montana State AGbd_c9f5e50c6ec6b04c2021-09-16 · +6dCandidate

Name: Town of Concord
norm: town of concord

Name: Town of Concord
norm: town of concord
Industry: Governmentllm

Discovered: —
Breach occurred: Oct 17, 2019
Materiality determined: —
Notification sent: Sep 16, 2021
Affected individuals: 4,705state-resident count only
Data types: Identity (basic)Government IDCredentialsBiometricPHIHealth (basic)
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified the Office of the New Hampshire Attorney General

During the incident: Commenced a criminal investigation with the Town of Concord Police Department
Engaged outside forensic experts to determine what information was stored on the missing hard drives
Blocked access to old passwords
Changed access procedures
Provided written notice to affected individuals
Provided access to credit monitoring services for twelve (12) months through Kroll
Changes made: Reviewing existing policies and procedures
Implementing additional safeguards to enhance the security of information in its possession
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGSep 16 · first

Maine State AG+1d

New Hampshire State AG+6d · this page

Pattern: first filing Sep 16 (MT), last Sep 22 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/town-concord-20210922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 22, 2021
Raw hash: f90631d0467c9cdd7dd63955e3e77d4f81601f33f8ae39275e8426b310c80695

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityTown of Concord

Victim entityTown of Concord

IncidentUnknown

Stated responseCommenced a criminal investigation with the Town of Concord Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov