MisuseGovernment IDFinancial accountMediumContained

HURON CONSULTING GROUP INC.

bd_a03e60dec4aed6e6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 1, 2008

Filed

Jul 15, 2008

To disclose

14 days

Affected

9state residents only

Confidence

67%

Full breach record for HURON CONSULTING GROUP INC. →2 incidents on file

Huron Consulting Group notified the New Hampshire Attorney General on July 15, 2008, regarding an insider threat incident involving 9 NH residents. A former employee with authorized access stole and cashed paychecks and downloaded employee W-2 forms to a company laptop. The employee was terminated, and the FBI and Chicago Police were notified. No evidence of misuse of the downloaded data was found, but credit monitoring was provided to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 days

Jul 1, 2008

Discovered

Jul 15, 2008

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed9 affectedView incident

Name: HURON CONSULTING GROUP INC.
norm: huron consulting
Domain: huronconsultinggroup.com

Name: HURON CONSULTING GROUP INC.
norm: huron consulting
Domain: huronconsultinggroup.com

Discovered: Jul 1, 2008
Materiality determined: —
Notification sent: Jul 16, 2008
Affected individuals: 9state-resident count only
Data types: Government IDFinancial account
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: InternalFinancial
Regulator citations: Reported this matter to local law enforcement (Chicago Police Department) and the FBI
Initial access: insider_action

During the incident: Terminated the employee
Reported this matter to local law enforcement (Chicago Police Department) and the FBI
Engaged ConsumerInfo.com, Inc., an Experian company, to provide one full year of credit monitoring
Changes made: Intended to inform employees that personal information may not have been fully secured so that they can take steps to protect their personal information and credit
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 days(14 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/huron-consulting-20080715.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2008
Raw hash: 42f4e6d575ff21ffd1f4165c8da5203c44c6de6dba9a89885fc3bd5321b7ce68

Reporting entityHURON CONSULTING GROUP INC.

Victim entityHURON CONSULTING GROUP INC.

Incidentdiscovered Jul 1, 2008

Stated responseTerminated the employee

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov