HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumActive
Paymentus Holdings, Inc.
bd_ab9cda613677964e · schema v1 · pii pii-v1
Full breach record for Paymentus Holdings, Inc. →PayJunction, Inc. notified the New Hampshire Attorney General on October 1, 2013, of unauthorized access to a data backup of an internal business system affecting sales agents. The incident occurred in July 2013 and was discovered in late September 2013. The breach compromised the names, Social Security numbers, and bank account numbers of 3 New Hampshire residents. PayJunction reported the incident to law enforcement, engaged in investigation, and arranged for 12 months of complimentary identity theft protection via AllClear ID for affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/payjunction-20131001.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 1, 2013
- Raw hash
- e5c893d9b02f46a8bf2714a2726ed898401f5da2ebf864b63b0353a722787ab5
Reporting entity
- Name
- Paymentus Holdings, Inc.norm: paymentus holdings
Victim entity
- Name
- Paymentus Holdings, Inc.norm: paymentus holdings
Incident
- Discovered
- Jul 1, 2013
- Materiality determined
- —
- Notification sent
- Sep 1, 2013
- Affected individuals
- 3
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported it to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.