HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
BAE SYSTEMS HOLDINGS INC.
bd_b00d421aeeb9957d · schema v1 · pii pii-v1
Full breach record for BAE SYSTEMS HOLDINGS INC. →BAE Systems, Inc. notified the New Hampshire Attorney General that a third-party vendor experienced unauthorized access to personal information of 87 New Hampshire residents. The unauthorized access occurred on or after September 25, 2022, and was discovered by BAE Systems on November 6, 2022. Data types included names, addresses, health/medical information, and Social Security numbers. BAE Systems mailed notifications on December 2, 2022, and offered credit monitoring services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0e672c85445d40faMontana State AGfiled 2022-12-02(3d gap)Candidate
- bd_d2ff2b8ac15473efMaine State AGfiled 2022-12-02(3d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bae-systems-20221205.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 5, 2022
- Raw hash
- 04938bb97483ce910af039094508e6560b6bcfe0848fdcdbcbe99af0f042085e
Reporting entity
- Name
- BAE SYSTEMS HOLDINGS INC.norm: bae systems
Victim entity
- Name
- BAE SYSTEMS HOLDINGS INC.norm: bae systems
Incident
- Discovered
- Nov 6, 2022
- Materiality determined
- —
- Notification sent
- Dec 2, 2022
- Affected individuals
- 87
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified NH Department of Justice
- Initial access
- supply_chain
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.