AccidentalManufacturingManufacturingMisconfigurationCustomer Data InvolvedGovernment IDIdentity (basic)EmploymentHighContained

NSK Americas, Inc.

bd_99d98f3f3761d5f6 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 25, 2008

Filed

Jan 25, 2008

To disclose

≤1 day

Affected

2,000scope not determined

Confidence

65%

NSK Americas, Inc. notified the New Hampshire Attorney General on January 25, 2008, regarding an unauthorized access to an internal server folder containing employee data (names, SSNs, salaries) of approximately 2,000 current, former, and retired employees. The breach resulted from an IT administrative error during a server migration in June 2006. NSK secured the folder, engaged Kroll On-Track for forensic investigation, and provided free credit monitoring via Kroll OnTheftSmart to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 603 days

discovery → filing · ≤1 day / 0 days

Jun 1, 2006

Begins

Jan 25, 2008

Discovered

Jan 25, 2008

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,000 affectedView incident

Name: NSK Americas, Inc.
norm: nsk americas
Domain: nskautomation.com

Name: NSK Americas, Inc.
norm: nsk americas
Domain: nskdental.com
Industry: Manufacturingllm

Discovered: Jan 25, 2008
Breach occurred: Jun 1, 2006
Undetected for: 603 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 17, 2008
Affected individuals: 2,000scope not determined
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1535 Unattended Remote Access

During the incident: Secured the affected folder
Retained Kroll On-Track, an industry-leading security consulting firm, to help us
Conducted a detailed review of all network logs
Notified employees with the attached letter
Contracted with Kroll OnTheftSmart firm to provide credit monitoring and other related services at no cost to our employees
Changes made: Working with Kroll to determine any other corrective or improved security measures are necessary
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(0 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nsk-20080125.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 25, 2008
Raw hash: 9afd370b781135adc125bf1e3d764fcb47f1850a97fef7c4875dc3d00a36d415

Reporting entityNSK Americas, Inc.

Victim entityNSK Americas, Inc.

Incidentdiscovered Jan 25, 2008

Stated responseSecured the affected folder

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov