Social EngineeringPhishingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
Nortrax, Inc.
bd_b82410c9777c8d10 · schema v1 · pii pii-v1
Full breach record for Nortrax, Inc. →Nortrax, Inc. notified the New Hampshire Attorney General of a phishing incident affecting 4 NH residents. An unauthorized user accessed an employee's email account between August 18 and October 26, 2018, obtaining copies of emails containing names, addresses, phone numbers, SSNs, and driver's license numbers. The breach was discovered on November 30, 2018. Nortrax contacted law enforcement, launched an investigation, and offered 12 months of credit monitoring and identity theft protection via ID Experts to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nortrax-20190114.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 14, 2019
- Raw hash
- d31d1a79b04fecfdb972dace3931fc9edffcfde9b1aff919ac2d92d9e485a355
Reporting entity
- Name
- Nortrax, Inc.norm: nortrax
Victim entity
- Name
- Nortrax, Inc.norm: nortrax
Incident
- Discovered
- Nov 30, 2018
- Materiality determined
- —
- Notification sent
- Jan 14, 2019
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.