HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Zydus Pharmaceuticals
bd_b1ad3decdb93ac83 · schema v1 · pii pii-v1
Full breach record for Zydus Pharmaceuticals →Zydus Pharmaceuticals (USA) Inc. notified the New Hampshire Attorney General of a data security incident discovered on July 28, 2024. An unauthorized party accessed files on Zydus's network, potentially exposing the identity information of one New Hampshire resident. Zydus engaged third-party specialists, notified the individual via mail on October 29, 2024, and offered complimentary credit monitoring services.
Leak gap clock⏱ Leak >30d13 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
A leak claim by meow about this victim predates this filing by 75 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_f715a8900baa1f74Leak Sitemeowfiled 2024-08-15(75d gap)Verified by operator
Regulatory filings (2) · sorted by filing gap
- bd_62f37f953213f45dVermont State AGfiled 2024-10-29Candidate
- bd_fb38cdeda0996f4dIndiana State AGfiled 2024-10-29Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/zydus-pharmaceuticals-usa-20241029.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2024
- Raw hash
- 276ba140504b01f68bae8b00c2a672151a13655121167058a49d649ddfeeb38c
Reporting entity
- Name
- Zydus Pharmaceuticalsnorm: zydus pharmaceuticals
- Domain
- zydususa.com
Victim entity
- Name
- Zydus Pharmaceuticalsnorm: zydus pharmaceuticals
- Domain
- zydususa.com
Incident
- Discovered
- Jul 28, 2024
- Materiality determined
- —
- Notification sent
- Oct 29, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(93 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.