HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICMediumContained
Transform SR Holding Management LLC
bd_900d046e5a2b8b92 · schema v1 · pii pii-v1
Full breach record for Transform SR Holding Management LLC →Transform SR Holding Management LLC notified the New Hampshire Attorney General of a security incident where an unauthorized party accessed computer servers between June 3 and June 15, 2021. On June 24, 2021, the company determined that files containing Social Security numbers, financial account numbers, and healthcare insurance information of current and former employees were accessed. The company engaged an outside IT security firm, offered Kroll identity monitoring services, and established a call center.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3981a27c11f2ef4cOregon State AGfiled 2021-07-26Candidate
- bd_b02389bb48e9e2faCalifornia State AGfiled 2021-07-26Verified
- bd_dbf01f83561796b4Maine State AGfiled 2021-07-26Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/transform-sr-holding-management-20210726.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 26, 2021
- Raw hash
- a7aedda0b91403fd4a6fce42c1ffb371ab88a105e4f1f2c4465ca167350cba36
Reporting entity
- Name
- Transform SR Holding Management LLCnorm: transform sr holding management
Victim entity
- Name
- Transform SR Holding Management LLCnorm: transform sr holding management
Incident
- Discovered
- Jun 24, 2021
- Materiality determined
- —
- Notification sent
- Jul 26, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.