HackingStolen CredentialsCapture Stored DataCustomer Data InvolvedEmployee Data InvolvedPIIEMPLOYMENTHEALTH_BASICLowContained
Hair Club for Men, Ltd., Inc.
bd_a378d32c242a179a · schema v1 · pii pii-v1
Full breach record for Hair Club for Men, Ltd., Inc. →Hair Club for Men, Ltd., Inc. notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to its network systems. The breach affected one New Hampshire resident, an employee or former employee, whose PHI (related to work injuries or FMLA) and PII were potentially accessed. Hair Club engaged a cybersecurity firm, secured the network, and offered one year of identity monitoring services to the affected individual. Notification was sent on January 12, 2024.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_0b5717dfb4b2c0d9Montana State AGfiled 2024-01-12Candidate
- bd_2c52e3f0b242f944Indiana State AGfiled 2024-01-12Verified
- bd_72e7a2ee98637f85Maine State AGfiled 2024-01-12Verified
- bd_91571f3d90f97802California State AGfiled 2024-01-12Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/hair-club-men-20240112.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 12, 2024
- Raw hash
- ca48f191f6cddcedbb2ada5c88a5e187923d65490476c81f7e4911103efe8956
Reporting entity
- Name
- Hair Club for Men, Ltd., Inc.norm: hair club for men
Victim entity
- Name
- Hair Club for Men, Ltd., Inc.norm: hair club for men
Incident
- Discovered
- Nov 1, 2023
- Materiality determined
- Dec 1, 2023
- Notification sent
- Jan 12, 2024
- Affected individuals
- 1
- Data types
- PIIEMPLOYMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified Attorney General John Formella
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(72 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.