PhysicalTechnologyInformationTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumActive

Hewlett-Packard Company

bd_ba0f5d76912f2600 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 4, 2008

To disclose

—

Affected

926state residents only

Confidence

68%

Hewlett-Packard Company notified the New Hampshire Attorney General on December 4, 2008, of the theft of a laptop containing names and Social Security numbers of current and former HP benefits program participants. Approximately 926 New Hampshire residents were affected. HP is working with law enforcement to recover the device and is offering two years of complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Dec 4, 2008

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed926 affectedView incident

Name: Hewlett-Packard Company
norm: hewlett-packard
Domain: hp.com

Name: Hewlett-Packard Company
norm: hewlett-packard
Domain: hp.com
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Dec 4, 2008
Affected individuals: 926state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General

During the incident: Working with law enforcement authorities to recover the stolen laptop
Continuing to investigate what information was contained on the laptop
Taking steps to help ensure that this type of incident does not happen in the future
Sending notices to affected individuals
Offering complimentary credit monitoring for up to two years
Changes made: Taking steps to help ensure that this type of incident does not happen in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hewlett-packard-20081204.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 4, 2008
Raw hash: b99194075eba74be1f1ff2220aa14f54d0ce945374469a3990dae15269c15dfb

Reporting entityHewlett-Packard Company

Victim entityHewlett-Packard Company

IncidentUnknown

Stated responseWorking with law enforcement authorities to recover the stolen laptop

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov