AccidentalTechnologyInformationMisdeliveryCustomer Data InvolvedPIIIdentity (basic)CredentialsLowContained

Telmate, LLC

bd_b1446e61be0578c7 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 13, 2020

Filed

May 7, 2021

To disclose

38 weeks

Affected

12state residents only

Linked

7 filings

Confidence

67%

Full breach record for Telmate, LLC →2 incidents on file

Telmate, LLC notified the New Hampshire Attorney General on May 7, 2021, regarding a security incident affecting 12 NH residents. On August 13, 2020, a vendor error exposed personal information (names, account details, phone numbers, call duration) via an unsecured server. Telmate corrected the access immediately, notified the FBI and Secret Service, and provided 12 months of free credit monitoring via Equifax to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 38 weeks / 267 days

Aug 13, 2020

Discovered

May 7, 2021

Filed

vs. sector median

+20 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Oregon State AGbd_0dad3edb4b61c6522021-05-07Candidate
California State AGbd_1a578919c9009ab42021-05-07Verified
Massachusetts State AGbd_8476522a073075982021-05-07Verified
Washington State AGbd_a5fc2341a0b6d1c52021-05-07Verified

Show 2 more filings ↓

Montana State AGbd_e418fe51c7cec7312021-05-07Verified
Indiana State AGbd_e6eb0c4b62b6fe8e2021-05-07Verified

Name: Telmate, LLC
norm: telmate

Name: Telmate, LLC
norm: telmate
Industry: Technologyllm

Discovered: Aug 13, 2020
Materiality determined: —
Notification sent: May 7, 2021
Affected individuals: 12state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified the New Hampshire Office of the Attorney General, Consumer Protection Bureau

During the incident: Reported the incident to the U.S. Secret Service and the Federal Bureau of Investigation
Corrected the unsecured server access within the same day
Updated security
Mailed notice to affected New Hampshire residents
Offered a 12 month subscription to credit monitoring and identity protection services through Equifax
Changes made: Corrected the unsecured server access within the same day
Updated security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 38 weeks(267 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Oregon State AGMay 7 · first

California State AGMay 7 · first

Massachusetts State AGMay 7 · first

Washington State AGMay 7 · first

Montana State AGMay 7 · first

Indiana State AGMay 7 · first

New Hampshire State AGMay 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/telmate-20210507.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2021
Raw hash: d9c3dec3e53f458db8a1c6f86879e87ea8453df88b3c2415bc7933f847d6cdb9

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTelmate, LLC

Victim entityTelmate, LLC

Incidentdiscovered Aug 13, 2020

Stated responseReported the incident to the U.S. Secret Service and the Federal Bureau of Investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov