AccidentalTechnologyFinancial ServicesInformationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Redtail Technology Inc

bd_b941b6255e98a2b9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 4, 2019

Filed

May 28, 2019

To disclose

12 weeks

Affected

56state residents only

Linked

4 filings

Confidence

67%

Full breach record for Redtail Technology Inc →

Redtail Technology, Inc. notified the NH Attorney General of a data security incident discovered on March 4, 2019. Misconfigured logging systems inadvertently captured personal information (names, addresses, DOBs, SSNs) in debug log files accessible to the internet. 56 NH residents were notified on May 24, 2019. Remediation included workflow changes, active scanning, and code review processes. LifeLock services were provided to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 85 days

Mar 4, 2019

Discovered

May 28, 2019

Filed

vs. sector median

6 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_a4fa8eddca9a46292019-05-24 · +4dVerified
California State AGbd_905d6c4d91ed83b62019-05-23 · +5dVerified
Montana State AGbd_dd0fc0ffffc2c3b12019-05-23 · +5dCandidate

Name: Spencer Fane
norm: spencer fane
Domain: spencerfane.com

Name: Redtail Technology Inc
norm: redtail technology
Industry: TechnologyllmFinancial Servicesllm

Discovered: Mar 4, 2019
Materiality determined: —
Notification sent: May 24, 2019
Affected individuals: 56state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection
Regulator citations: Notified New Hampshire Attorney General

During the incident: Implemented a more rigid server deployment workflow
Implemented active scanning software to alert of any possible issues
Implemented a code review process so that every line of code a developer writes is reviewed and approved by another developer
Partnered with LifeLock to provide credit monitoring and identity theft protection services
Changes made: Implemented a more rigid server deployment workflow
Implemented active scanning software
Implemented a code review process
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGMay 23 · first

Montana State AGMay 23 · first

Massachusetts State AG+1d

New Hampshire State AG+5d · this page

Pattern: first filing May 23 (CA), last May 28 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/redtail-technology-20190528.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 28, 2019
Raw hash: 0c8f72ca5dfd450c60a52a670ca4876e23d181c7ba7c007f25072ec20637c771

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entitySpencer Fane

Victim entityRedtail Technology Inc

Incidentdiscovered Mar 4, 2019

Stated responseImplemented a more rigid server deployment workflow

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov