HackingTechnologyInformationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Worldwide Mail Solutions, Inc

bd_9ae7a9884a389f30 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 23, 2023

Filed

Mar 24, 2023

To disclose

29 days

Affected

4state residents only

Linked

4 filings

Confidence

64%

Full breach record for Worldwide Mail Solutions, Inc →

Worldwide Mail Solutions, Inc. notified New Hampshire AG of unauthorized access to cloud servers on Feb 20-21, 2023. Incident affected 4 NH residents, exposing names, emails, driver's licenses, and passports. No SSNs or credit cards involved. Company engaged law enforcement, reset passwords, and enhanced access controls.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 29 days

Feb 20, 2023

Begins

Feb 23, 2023

Discovered

Feb 28, 2023

Scope determined

Mar 24, 2023

Filed

vs. sector median

7 wks faster

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_c153c73927bd08c92023-03-20 · +4dVerified
Montana State AGbd_f72be117d33641082023-03-13 · +11dCandidate
Maine State AGbd_0a08edb2c2b2a16d2023-03-10 · +14dCandidate

Name: Worldwide Mail Solutions, Inc
norm: worldwide mail

Name: Worldwide Mail Solutions, Inc
norm: worldwide mail
Industry: Technologyllm

Discovered: Feb 23, 2023
Breach occurred: Feb 20, 2023 – Feb 21, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: Feb 28, 2023
Notification sent: Mar 20, 2023
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Initial access: exploit_public_facing

During the incident: Began an investigation
Reported this incident to the law enforcement
Modified access controls
Changed admin and network passwords
Added additional system monitoring
Implementing additional security features for access control over our backend servers
Changes made: Modified access controls
Changed admin and network passwords
Added additional system monitoring
Implementing additional security features for access control over our backend servers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGMar 10 · first

Montana State AG+3d

Indiana State AG+10d

New Hampshire State AG+14d · this page

Pattern: first filing Mar 10 (ME), last Mar 24 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/worldwide-mail-solutions-20230324.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2023
Raw hash: 1c0eb3cc897b30a9ef81a151151c2db5e4d3479c15a7d790c5808cea9f43753a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWorldwide Mail Solutions, Inc

Victim entityWorldwide Mail Solutions, Inc

Incidentdiscovered Feb 23, 2023

Stated responseBegan an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov