AccidentalFinancial ServicesTechnologyFinanceMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

AM2 Enterprises, LLC

bd_a3ae9b10071f8ccc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 31, 2017

Filed

Sep 19, 2017

To disclose

7 weeks

Affected

130state residents only

Linked

2 filings

Confidence

67%

Full breach record for AM2 Enterprises, LLC →

AM2 Enterprises, LLC notified the NH Attorney General of an inadvertent disclosure of customer names and SSNs to a second lender due to a software error in the Approve.Me loan application platform. Approximately 130 NH residents were affected. The incident was discovered on July 31, 2017, and notifications were sent in September 2017. Software was updated to prevent recurrence.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 50 days

Jul 31, 2017

Discovered

Sep 19, 2017

Filed

vs. sector median

1 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_b0296fcb7e1fb2f82017-09-19Verified

Name: AM2 Enterprises, LLC
norm: am2 enterprises

Name: AM2 Enterprises, LLC
norm: am2 enterprises
Industry: Financial ServicesllmTechnologyllm

Discovered: Jul 31, 2017
Materiality determined: —
Notification sent: Sep 20, 2017
Affected individuals: 130state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
Regulator citations: Notified Attorney General Gordon MacDonald pursuant to New Hampshire Statute § 359-C:19

During the incident: Contacted the impacted lenders and informed them that it sent the information in error
Updated its software in an effort to prevent this error from occurring in the future
Notifying individuals who may have been impacted by this error
Changes made: Updated its software in an effort to prevent this error from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 19 · first

New Hampshire State AGSep 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/am2-20170919.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2017
Raw hash: 31501e3f10e37cc3214de6eed4178bc1c6c2f883ac9359e170767d59782eba0d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAM2 Enterprises, LLC

Victim entityAM2 Enterprises, LLC

Incidentdiscovered Jul 31, 2017

Stated responseContacted the impacted lenders and informed them that it sent the information in error

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov