HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDCredentialsFinancial accountMediumContained

Wurkforce, Inc.

bd_9ebd1e3626d41f48 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2020

Filed

Aug 3, 2020

To disclose

25 weeks

Affected

5state residents only

Linked

7 filings

Confidence

67%

Full breach record for Wurkforce, Inc. →

Würkforce, Inc. notified the New Hampshire Attorney General of a data security incident affecting 5 state residents. Unauthorized access to employee email accounts occurred, exposing names, SSNs, driver's license numbers, financial account details, and healthcare information. The company engaged forensic investigators, secured its email system, and provided credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 25 weeks / 174 days

Feb 11, 2020

Discovered

Aug 3, 2020

Filed

vs. sector median

+14 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_18f0dff354c8b3842020-08-03Verified
Oregon State AGbd_3a96e56e76927b842020-08-03Candidate
Washington State AGbd_5304feaf854097762020-08-03Verified
Indiana State AGbd_7e0d5e2688fff7222020-08-03Verified

Show 2 more filings ↓

Montana State AGbd_921460ad57981f4c2020-08-03Verified by operator
Massachusetts State AGbd_98a758c17a0664372020-08-03Verified

Name: Wurkforce, Inc.
norm: wurkforce

Name: Wurkforce, Inc.
norm: wurkforce
Industry: Technologyllm

Discovered: Feb 11, 2020
Materiality determined: —
Notification sent: Aug 3, 2020
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDCredentialsFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took immediate steps to secure its email system
Engaged an independent digital forensics firm to conduct an investigation
Engaged a document review vendor to assist in reviewing the contents of the relevant accounts
Reporting the incident to law enforcement
Changes made: Working with leading cybersecurity experts to enhance the security of its digital environment
Providing complimentary credit monitoring and identity theft restoration services to each letter recipient through ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(174 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

California State AGAug 3 · first

Oregon State AGAug 3 · first

Washington State AGAug 3 · first

Indiana State AGAug 3 · first

Montana State AGAug 3 · first

Massachusetts State AGAug 3 · first

New Hampshire State AGAug 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wurkforce-20200803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 3, 2020
Raw hash: f8f9610bc23bc35387e03b837a15d68e3aa2e75b6cad441337b43c29a8f6f027

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityWurkforce, Inc.

Victim entityWurkforce, Inc.

Incidentdiscovered Feb 11, 2020

Stated responseTook immediate steps to secure its email system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov