HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Gerber Gear
bd_b0df97eb541d5251 · schema v1 · pii pii-v1
Full breach record for Gerber Gear →Gerber Technology, LLC reported a data security incident to the New Hampshire Attorney General on May 25, 2022. The company discovered unauthorized access to its systems on February 16, 2022. The incident potentially exposed personal information of 32 New Hampshire residents, including names, Social Security numbers, driver's license information, passport numbers, and bank account information. Gerber engaged forensic experts, notified the FBI, and provided 24 months of complimentary identity monitoring services through Kroll to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed32 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gerber-20220525.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 25, 2022
- Raw hash
- a7b7c88fe84e90d3fbfbcfe828e268753e0e8bdb672727a0e4ab9d6e6abe29e3
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Gerber Gearnorm: gerber gear
- Domain
- gerbergear.com
Incident
- Discovered
- Feb 16, 2022
- Materiality determined
- —
- Notification sent
- May 24, 2022
- Affected individuals
- 32
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of InvestigationProvided cooperation to assist in their investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.