HackingTechnologyProfessional ServicesInformationStolen CredentialsCapture Stored DataData ExfiltratedTargetedIdentity (basic)Government IDMediumContained

Transplace Holdings, Inc.

bd_9691a9ba79dd8033 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 7, 2021

Filed

Jun 14, 2021

To disclose

14 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Transplace Holdings, Inc. →

Transplace experienced an unauthorized download of personnel records containing names and SSNs. Discovered March 7, 2021. Notification sent June 8, 2021. No evidence of misuse found. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 99 days

Mar 7, 2021

Discovered

Jun 14, 2021

Filed

vs. sector median

+3 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_fdeb41be31e9fa472021-06-09 · +5dVerified
Indiana State AGbd_8204f1b14d3e366d2021-06-08 · +6dVerified
Montana State AGbd_8f35530d98406b802021-06-08 · +6dCandidate

Name: Transplace Holdings, Inc.
norm: transplace holdings

Name: Transplace Holdings, Inc.
norm: transplace holdings
Also named: Transplace Holdings, Inc.operating subsidiary ofholding company
Industry: TechnologyllmProfessional Servicesllm

Discovered: Mar 7, 2021
Materiality determined: —
Notification sent: Jun 8, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Working with law enforcement
Initial access: valid_credentials

During the incident: Working with law enforcement and outside experts to investigate
Installed additional security monitoring tools
Implemented new processes
Offering one year of complimentary credit monitoring and identity protection services from Experian
Changes made: Expanding the coverage of its endpoint monitoring tool (FireEye HX)
Implementing “jump hosts” to restrict direct administrative login to the company's server environment
Implementing multi-factor authentication for VPN access and Mimecast
Replacing or rebuilding compromised or potentially compromised systems
Creating an elevated account model to separate standard use accounts from administrative accounts
Implementing credential harvesting counter-measures (e.g., restricting admin mode, disabling credential caching)
Implementing Privileged Access Management (PAM) for critical systems
Implementing Local Administrator Password Solution (LAPS) in the company's server and workstation environments
Performing an audit of existing service accounts
Implementing RMS (encryption) on critical internal file shares
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJun 8 · first

Montana State AGJun 8 · first

Massachusetts State AG+1d

New Hampshire State AG+6d · this page

Pattern: first filing Jun 8 (IN), last Jun 14 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/transplace-holdings-20210614.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2021
Raw hash: 6e13c5e661fefaa84787194d3693135157cf157a6d06e7be798dd01b075c2364

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTransplace Holdings, Inc.

Victim entityTransplace Holdings, Inc.

Incidentdiscovered Mar 7, 2021

Stated responseWorking with law enforcement and outside experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov