Deep Foundations Institute, Inc.
bd_b3dc16085b2fcb4c · schema v1 · pii pii-v1
Full breach record for Deep Foundations Institute, Inc. →Deep Foundations Institute, Inc. (DFI) notified the New Hampshire Attorney General of a data security incident involving a third-party vendor. On April 27, 2022, the vendor discovered suspicious code in its payment software intended to obtain credit/debit card data. DFI determined one New Hampshire resident's name and credit/debit card information (including CVV and expiration date) may have been impacted. DFI notified the individual on May 24, 2022, and offered 12 months of complimentary credit monitoring. The vendor removed the code and implemented additional security measures.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_4a39a31bba8b1246Maine State AGfiled 2022-05-25(6d gap)Verified by operator
- bd_dcb59a2c0800c082Montana State AGfiled 2022-05-24(7d gap)Verified by operator
- bd_32c60d07c596f78cMaine State AGfiled 2022-05-16(15d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/deep-foundations-20220531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 31, 2022
- Raw hash
- 2064e8f748c48ed673d303bcc456808f97ae698b4b13116aa7345d0bbefa2d64
Reporting entity
- Name
- Cipriani & Werner, P.C.norm: cipriani werner
Victim entity
- Name
- Deep Foundations Institute, Inc.norm: deep foundations institute
Incident
- Discovered
- Apr 27, 2022
- Materiality determined
- —
- Notification sent
- May 24, 2022
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- Partner
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 weeks(34 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.