HackingTechnologyRetail & ConsumerInformationStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Financial accountAuthenticationLowContained

Goldner Associates, Inc.

bd_b61b5763ee9c7a38 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 16, 2013

Filed

May 31, 2013

To disclose

15 days

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Goldner Associates, Inc. →

Goldner Associates, Inc. notified NH AG of a breach at its third-party hosting provider. Unauthorized access occurred May 14, 2013, discovered May 16. Affected ~3 NH residents. Data accessed: names, credit/debit card numbers, expiration, CVV, addresses, phones. Card data was encrypted but encryption key likely accessed. Response: engaged experts, removed card data, implemented tokenization, notified consumers.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 15 days

May 14, 2013

Begins

May 16, 2013

Discovered

May 31, 2013

Filed

vs. sector median

9 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_63373a51dbe14fb72013-06-04 · +4dVerified

Name: Vorys, Sater, Seymour and Pease LLP
norm: vorys sater seymour and pease

Name: Goldner Associates, Inc.
norm: goldner associates
Industry: TechnologyllmRetail & Consumerllm

Discovered: May 16, 2013
Breach occurred: May 14, 2013
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 17, 2013
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial accountAuthentication
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice
Initial access: trusted_relationship

During the incident: Worked with service provider to determine how unauthorized access was obtained
Shut down the means of unauthorized access
Removed all credit card data from the system
Implemented a tokenization system
Engaged outside experts to assist
Working with payment card processor and card brands
Sent email notice to affected consumers
Sent direct notification via postal mail to affected consumers
Changes made: Implemented a tokenization system so it will no longer be necessary to retain payment card information
Removed all credit card data from the system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGMay 31 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/goldner-associates-20130531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2013
Raw hash: cd2be3f2dfd8a7ab3cf3525e4ddfbc77fd369b413a23f14929e5a0ecbffa43ac

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityVorys, Sater, Seymour and Pease LLP

Victim entityGoldner Associates, Inc.

Incidentdiscovered May 16, 2013

Stated responseWorked with service provider to determine how unauthorized access was obtained

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov