HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
THE CORNWELL QUALITY TOOLS COMPANY
bd_a57b84ec9f46f1f6 · schema v1 · pii pii-v1
Full breach record for THE CORNWELL QUALITY TOOLS COMPANY →Cornwell Quality Tools notified the NH AG of a data security incident discovered on Sept 22, 2022. Unauthorized access to systems containing borrower-related PII was confirmed. 99 NH residents were notified on Aug 29, 2023. FBI was notified. Credit monitoring offered.
Leak gap clock✗ Leak >180d49 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by hive about this victim predates this filing by 295 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0ddd24cf67f84c8aMontana State AGfiled 2023-08-29Candidate
- bd_2cb7683973c6c8d4California State AGfiled 2023-08-29Verified
- bd_48358d610e830741Maine State AGfiled 2023-08-29Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cornwell-quality-tools-20230829.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2023
- Raw hash
- e004e23ac2556341b60ca40eb420fbcc2418c8ee180ce71423807bd43d3cb4df
Reporting entity
- Name
- THE CORNWELL QUALITY TOOLS COMPANYnorm: the cornwell quality tools
Victim entity
- Name
- THE CORNWELL QUALITY TOOLS COMPANYnorm: the cornwell quality tools
Incident
- Discovered
- Sep 22, 2022
- Materiality determined
- Aug 23, 2023
- Notification sent
- Aug 29, 2023
- Affected individuals
- 99
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of Investigation
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 49 weeks(341 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.