MalwareTechnologyProfessional ServicesInformationRansomwareData ExfiltratedRansom DemandedIdentity (basic)Government IDFinancial accountCredentialsMediumContained

COGNIZANT TECHNOLOGY SOLUTIONS CORPORATION

bd_b31c9483008d61d5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 20, 2020

Filed

Jul 1, 2020

To disclose

10 weeks

Affected

135state residents only

Linked

3 filings

Confidence

64%

Full breach record for COGNIZANT TECHNOLOGY SOLUTIONS CORPORATION →8 incidents on file

Cognizant Technology Solutions Corporation notified the NH AG of a ransomware attack. Unauthorized access occurred April 9-11, 2020; discovered April 20, 2020. Impacted data included names, SSNs, financial account info, and corporate credit card details for ~135 NH residents (employees/contractors). Cognizant is cooperating with the FBI and offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

discovery → filing · 10 weeks / 72 days

Apr 9, 2020

Begins

Apr 20, 2020

Discovered

Jul 1, 2020

Filed

vs. sector median

8 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_5bfad1826effda592020-06-24 · +7dVerified
California State AGbd_d54c3dd93d7714992020-06-17 · +14dCandidate

Name: COGNIZANT TECHNOLOGY SOLUTIONS CORPORATION
norm: cognizant technology
Domain: cognizant.com

Name: COGNIZANT TECHNOLOGY SOLUTIONS CORPORATION
norm: cognizant technology
Domain: cognizant.com
Industry: TechnologyllmProfessional Servicesllm

Discovered: Apr 20, 2020
Breach occurred: Apr 9, 2020 – Apr 11, 2020
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 17, 2020
Affected individuals: 135state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Cooperating with the FBI in connection with their own investigation of the cyber criminals responsible for the attack

During the incident: Cooperating with the FBI in connection with their own investigation of the cyber criminals responsible for the attack
Quickly containing the incident
Providing notice to the issuer of the cards about these accounts
Providing individuals with an offer for complimentary credit monitoring, dark web monitoring, and identity theft insurance and recovery services provided by ID Experts
Changes made: Taking steps to further enhance Cognizant’s overall security posture
Cognizant maintains a written information security program
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(72 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGJun 17 · first

Massachusetts State AG+7d

New Hampshire State AG+14d · this page

Pattern: first filing Jun 17 (CA), last Jul 1 (NH) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cognizant-technology-solutions-corporation-20200701.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2020
Raw hash: d042c28fc922b608cd908d5b8c4aadc3723d340bf970af5e0264bbb2f97fe19b

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCOGNIZANT TECHNOLOGY SOLUTIONS CORPORATION

Victim entityCOGNIZANT TECHNOLOGY SOLUTIONS CORPORATION

Incidentdiscovered Apr 20, 2020

Stated responseCooperating with the FBI in connection with their own investigation of the cyber criminals responsible for the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov