HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

NSC Technologies

bd_9f7838dcda55b41c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 26, 2023

Filed

Nov 21, 2023

To disclose

21 weeks

Affected

8state residents only

Linked

7 filings

Confidence

66%

Full breach record for NSC Technologies →2 incidents on file

NSC Technologies notified New Hampshire residents on November 21, 2023, regarding a cyberattack where an unauthorized actor accessed files between June 19 and June 20, 2023. The company discovered suspicious activity on June 26, 2023, and notified federal law enforcement. Approximately 8 NH residents were affected. The company provided credit monitoring and identity theft recovery services through IDX (a ZeroFox Company) and enhanced security measures.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 21 weeks / 148 days

Jun 19, 2023

Begins

Jun 26, 2023

Discovered

Nov 21, 2023

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Washington State AGbd_312633707198f0192023-11-21Candidate
California State AGbd_76dcf1263ed9f3fd2023-11-21Verified
Massachusetts State AGbd_7e34774244b899fe2023-11-21Verified
Hawaii State AGbd_a1d77017365778202023-11-21Verified

Show 2 more filings ↓

Maine State AGbd_ae0faab99f9db98b2023-11-21Verified by operator
Montana State AGbd_d49f87bb58ae8cfa2023-11-21Verified

Name: NSC Technologies
norm: nsc technologies

Name: NSC Technologies
norm: nsc technologies
Industry: Technologyllm

Discovered: Jun 26, 2023
Breach occurred: Jun 19, 2023 – Jun 20, 2023
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 21, 2023
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: providing written notice of this incident to relevant state regulators, as necessary
Initial access: exploit_public_facing

During the incident: Moved quickly to investigate and respond to the incident
Assess the security of its systems
Identify potentially affected individuals
Notified federal law enforcement regarding the incident
Review and enhance its existing policies and procedures relating to data protection and security
Implemented additional security measures to mitigate risk associated with this incident and to help prevent future similar incidents
Providing access to credit monitoring services for ... through IDX, A ZeroFox Company, to individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Review and enhance its existing policies and procedures relating to data protection and security
Implemented additional security measures to mitigate risk associated with this incident and to help prevent future similar incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGNov 21 · first

California State AGNov 21 · first

Massachusetts State AGNov 21 · first

Hawaii State AGNov 21 · first

Maine State AGNov 21 · first

Montana State AGNov 21 · first

New Hampshire State AGNov 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/nsc-technologies-20231121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2023
Raw hash: 6493e301499d6896da2c6086df679673bf55894075ab0bec9930cda97908cb9d

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityNSC Technologies

Victim entityNSC Technologies

Incidentdiscovered Jun 26, 2023

Stated responseMoved quickly to investigate and respond to the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov