Genvey 1A N.V.
bd_b98bb49980174a46 · schema v1 · pii pii-v1
Full breach record for Genvey 1A N.V. →Genvey 1A N.V. reported a data breach to New Hampshire authorities on September 20, 2021. The incident involved unauthorized access to two New Hampshire resident accounts via a vulnerability in third-party supplier software. The attacker exploited the vulnerability to gain access and attempted to steal Electroneum (ETN) cryptocurrency. While the primary focus was financial theft, the attacker claimed to have accessed a wider database containing personal data including names, contact details, encrypted passwords, PINs, and financial account info. Two individuals were affected. Genvey suspended the system, restored stolen ETN, implemented new security protocols, and initiated staff training.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_450bca0fd440621cMaine State AGfiled 2021-09-20Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/genvey-20210920.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 20, 2021
- Raw hash
- 2e68f438132fb502ef8728139983e8937d83a05ac2c447f55ac588097aedcec7
Reporting entity
- Name
- Genvey 1A N.V.norm: genvey 1a
- Industry
- Crypto Currency
Victim entity
- Name
- Genvey 1A N.V.norm: genvey 1a
- Industry
- Crypto Currency
Incident
- Discovered
- Aug 28, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTAUTHENTICATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Data protection supervisory authorities in EU member states and other jurisdictions for those other individuals whose information has been compromised.
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.