HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Employee Benefit Management Services, LLC
bd_93bc95a15503a9ea · schema v1 · pii pii-v1
Full breach record for Employee Benefit Management Services, LLC →Benefit Management Corporation notified the New Hampshire Attorney General of a security incident where an unauthorized third party accessed its network between September 8 and 11, 2023. The breach involved personal information of NH residents. Notifications began November 14, 2023, with supplemental notices in February 2024. The company offered credit monitoring and fraud consultation via Kroll.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8abca0309bfa871fVermont State AGfiled 2024-03-29Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/benefit-management-20240329.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 29, 2024
- Raw hash
- 4d1681a8e7f51cc790a4c2de46663027d9d1effec0c8827131ec70d4ea547c02
Reporting entity
- Name
- Employee Benefit Management Services, LLCnorm: employee benefit management
Victim entity
- Name
- Employee Benefit Management Services, LLCnorm: employee benefit management
Incident
- Discovered
- Sep 11, 2023
- Materiality determined
- —
- Notification sent
- Nov 14, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 weeks(200 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.