AccidentalGovernmentGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Bureau of Child Support Services

bd_97920a4ba7927d97 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2018

Filed

Jan 17, 2019

To disclose

12 weeks

Affected · nationwide

21 in this filing

Confidence

65%

Full breach record for Bureau of Child Support Services →

NH DHHS Bureau of Child Support Services notified AG of security breach on Oct 25, 2018. Personal info (names, SSNs) of 2 individuals (NH and UT residents) was mistakenly included in documents filed for a Circuit Court case. Notification sent Jan 16, 2019. Remediation includes staff training.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 84 days

Oct 25, 2018

Discovered

Jan 17, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: State of New Hampshire, Department of Health and Human Services
norm: state of new hampshire department of health and human

Name: Bureau of Child Support Services
norm: bureau of child support
Industry: Governmentllm

Discovered: Oct 25, 2018
Materiality determined: —
Notification sent: Jan 16, 2019
Affected individuals: 2state + nationwide
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1566 Phishing
Regulator citations: BCSS also immediately reported the breach to my office

During the incident: A BCSS Regional Administrator spoke to each party by phone on or about October 25, 2018 to discuss the breach
BCSS also immediately reported the breach to my office
After a thorough internal investigation we have identified the cause of the breach
Initiated affirmative steps to prevent a similar situation from arising in the future
One step involves staff training on the identification and segregation of improper and unnecessary documents received from another jurisdiction in UIFSA cases
Changes made: Staff training on the identification and segregation of improper and unnecessary documents received from another jurisdiction in UIFSA cases
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(84 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/child-support-services-20190117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 17, 2019
Raw hash: 4c5280af4c832fda0f51ba2dc6aac3a02ef032669ba33c967547150e5df4edae

Reporting entityState of New Hampshire, Department of Health and Human Services

Victim entityBureau of Child Support Services

Incidentdiscovered Oct 25, 2018

Stated responseA BCSS Regional Administrator spoke to each party by phone on or about October 25, 2018 to discuss the breach

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov