PhysicalEducationEducationTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

THE WILLIAMS COMPANIES, INC.

bd_93fd004a7c7c29f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 5, 2009

Filed

Oct 30, 2009

To disclose

25 days

Affected

750

Confidence

66%

Full breach record for THE WILLIAMS COMPANIES, INC. →2 incidents on file

Williams College notified NH AG of a laptop theft on Oct 3, 2009, in Boston. The stolen device contained names and SSNs of ~750 individuals (9 NH residents). Discovered Oct 5, 2009. No evidence of misuse found. College reported to police, notified affected individuals, and provided 12 months of credit monitoring via Kroll. Remediation included encrypting laptops and staff training.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 25 days

Oct 3, 2009

Begins

Oct 5, 2009

Discovered

Oct 30, 2009

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed750 affectedView incident

Name: THE WILLIAMS COMPANIES, INC.
norm: the williams companies
Domain: williams.com

Name: THE WILLIAMS COMPANIES, INC.
norm: the williams companies
Domain: williams.com
Industry: Educationllm

Discovered: Oct 5, 2009
Breach occurred: Oct 3, 2009
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 750state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire State Attorney General's OfficeReported to Massachusetts State Police

During the incident: The incident was promptly reported to the State Police at the scene
The College promptly undertook to determine what personal information was on the laptop
The College scanned all of the files that are believed to exist on the stolen laptop to identify all personal information contained in those files
The College referenced its alumni and other records to compile address information for all individuals whose personal information is believed to be on the stolen laptop
The College is sending notification letters to all those individuals via first-class mail
The College also is notifying by email those affected individuals whose email addresses are on record with the College
The College has committed to provide identity theft safeguards to the affected individuals at the College’s expense
The College has instructed Kroll to provide affected individuals toll-free access to its Consumer Solutions Center, along with twelve months of continuous credit monitoring and identity theft restoration services
Changes made: The College has moved away from using Social Security numbers to identify people
The College has been training staff in data protection
The College has been cleaning and encrypting laptops
The College will further review its policies and procedures and do everything it can to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/williams-college-20091030.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2009
Raw hash: 7174ced6c69c4011de3856ef41acb1fa744d3c681686dc90c0c6060236e5242d

Reporting entityTHE WILLIAMS COMPANIES, INC.

Victim entityTHE WILLIAMS COMPANIES, INC.

Incidentdiscovered Oct 5, 2009

Stated responseThe incident was promptly reported to the State Police at the scene

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov