HackingFinancial ServicesTechnologyFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumActive

PayJunction, Inc.

bd_ab9cda613677964e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 1, 2013

Filed

Oct 1, 2013

To disclose

≤1 day

Affected

3state residents only

Linked

2 filings

Confidence

64%

Full breach record for PayJunction, Inc. →

PayJunction, Inc. notified the NH Attorney General of unauthorized access to a data backup of an internal business system affecting sales agents. The incident occurred in July 2013 and was discovered in late September 2013. Personal information of 3 New Hampshire residents, including names, social security numbers, and bank account numbers, was potentially compromised. PayJunction reported the incident to law enforcement, initiated an investigation, and provided 12 months of identity theft protection via AllClear ID to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 weeks / 92 days

Jul 1, 2013

Begins

Jul 1, 2013

Discovered

Oct 1, 2013

Filed

vs. sector median

9 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_bca73c87808e0e6d2013-10-07 · +6dVerified

Name: PayJunction, Inc.
norm: payjunction

Name: PayJunction, Inc.
norm: payjunction
Industry: Financial ServicesllmTechnologyllm

Discovered: Jul 1, 2013
Breach occurred: Jul 1, 2013
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 1, 2013
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unknown

During the incident: Reported it to law enforcement
Took immediate steps to investigate the matter
Arranged for AllClear ID to provide identity theft protection to all individuals whose social security number was compromised at no charge to them
Changes made: Continue our ongoing efforts to enhance our information security policies and procedures in light of this incident to help minimize the risk of such incidents to personal information in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGOct 1 · first · this page

Massachusetts State AG+6d

Pattern: first filing Oct 1 (NH), last Oct 7 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/payjunction-20131001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2013
Raw hash: e5c893d9b02f46a8bf2714a2726ed898401f5da2ebf864b63b0353a722787ab5

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityPayJunction, Inc.

Victim entityPayJunction, Inc.

Incidentdiscovered Jul 1, 2013

Stated responseReported it to law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov