PhysicalManufacturingManufacturingLossCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

PCC Structurals, Inc.

bd_941f554fe3d5a23f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 14, 2014

Filed

Jan 21, 2014

To disclose

7 days

Affected

31state residents only

Confidence

64%

Full breach record for PCC Structurals, Inc. →

PCC Structurals, Inc. reported a physical data loss incident where confidential documents containing employee names, SSNs, and ESPP contribution data were left in a restaurant. The incident occurred between Dec 30, 2013, and Jan 10, 2014, and was discovered on Jan 14, 2014. Approximately 31 employees were affected. The company provided credit monitoring services and notified the NH Attorney General.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 15 days

discovery → filing · 7 days

Dec 30, 2013

Begins

Jan 14, 2014

Discovered

Jan 21, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed31 affectedView incident

Name: PCC Structurals, Inc.
norm: pcc structurals

Name: PCC Structurals, Inc.
norm: pcc structurals
Industry: Manufacturingllm

Discovered: Jan 14, 2014
Breach occurred: Dec 30, 2013 – Jan 10, 2014
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 21, 2014
Affected individuals: 31state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified New Hampshire Attorney General

During the incident: Arranging to make credit monitoring and identity theft prevention and detection services available to employees at no cost
Sending enclosed letter to impacted employees through the U.S. Postal Service
Providing the three major U.S. credit reporting agencies with notice that the incident occurred
Changes made: Identifying an identity theft/credit security company to provide one year of credit monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pcc-structurals-20140121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 21, 2014
Raw hash: 63c35802f9c4001f6e64b64772cdbc900c4c1cfc113577431c5c148284910aea

Reporting entityPCC Structurals, Inc.

Victim entityPCC Structurals, Inc.

Incidentdiscovered Jan 14, 2014

Stated responseArranging to make credit monitoring and identity theft prevention and detection services available to employees at no cost

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov