HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Greater Boston Legal Services, Inc.
bd_9bc29b4db213f3f6 · schema v1 · pii pii-v1
Full breach record for Greater Boston Legal Services, Inc. →Greater Boston Legal Services (GBLS) notified the New Hampshire Attorney General of a data security incident occurring between June 24-26, 2021. An unauthorized third party may have accessed GBLS' network, potentially acquiring personal information of 60 New Hampshire residents, including names, SSNs, DOBs, and limited health information. GBLS secured its network, engaged forensic investigators, and sent notification letters offering 12 months of credit monitoring.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_b3dddadad78b2104Montana State AGfiled 2021-09-14(2d gap)Candidate
- bd_f9ba35ec9bd96436Maine State AGfiled 2021-09-14(2d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/greater-boston-legal-services-20210916.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 16, 2021
- Raw hash
- 72b901afadb8d581ce923ae949cf4623e0f98c93ba98e948db13aa9a9352a75d
Reporting entity
- Name
- Polsinelli PCnorm: polsinelli
Victim entity
- Name
- Greater Boston Legal Services, Inc.norm: greater boston legal
Incident
- Discovered
- Jun 26, 2021
- Materiality determined
- —
- Notification sent
- Sep 14, 2021
- Affected individuals
- 60
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 12 weeks(82 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.