HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
LOWER, LLC
bd_a2a7b54a540a74b6 · schema v1 · pii pii-v1
Full breach record for LOWER, LLC →Lower LLC notified Delaware AG of a data incident where an unauthorized actor accessed the network between Dec 10-14, 2021, stealing files and compromising employee email accounts. Affected data includes names, SSNs, DOBs, driver's license numbers, and financial account numbers. Lower engaged forensic specialists, notified law enforcement, and provided credit monitoring via Experian.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2245eba1b67dabbeMaine State AGfiled 2022-02-24Verified
- bd_3b577aac04bdd846Montana State AGfiled 2022-02-24Verified
- bd_e78dc2dd53529443Delaware State AGfiled 2022-01-27(28d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/08/Pages-from-Lower-LLC-DE-Exhibit-1-Notice-of-Data-Event.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 24, 2022
- Raw hash
- 3e7d56dc0ed14725e992f4d2d1f2f9753ab45ca429ecf8180d181c254a3010ce
Reporting entity
- Name
- LOWER, LLCnorm: lower
Victim entity
- Name
- LOWER, LLCnorm: lower
Incident
- Discovered
- Dec 14, 2021
- Materiality determined
- —
- Notification sent
- Aug 2, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- notifying regulatory authorities as required by law
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.