AccidentalTechnologyInformationMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumResolved

DSCI, LLC

bd_baff859c56573c92 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 24, 2018

Filed

Jul 17, 2018

To disclose

8 weeks

Affected

11state residents only

Confidence

66%

Full breach record for DSCI, LLC →2 incidents on file

DSCI, LLC dba TPx Communications notified the NH AG of a data breach where an employee inadvertently emailed personal information (names, addresses, DOBs, SSNs) of 23 employees to an external address on May 23, 2018. 11 NH residents were affected. TPx completed its investigation, initiated employee training, and sent notification letters on July 16, 2018.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 8 weeks / 54 days

May 23, 2018

Begins

May 24, 2018

Discovered

Jul 17, 2018

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed11 affectedView incident

Name: DSCI, LLC
norm: dsci
Domain: tpx.com

Name: DSCI, LLC
norm: dsci
Domain: tpx.com
Also named: DSCI, LLCdba oflegal entity
TPx Communicationsdba oftrade name
Industry: Technologyllm

Discovered: May 24, 2018
Breach occurred: May 23, 2018
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 16, 2018
Affected individuals: 11state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1535 Unused/Unsupported Cloud Storage
Threat actor: Internal
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: insider_action

During the incident: Completed its investigation into the incident
Instructed the employee how to avoid similar incidents from occurring in the future
Initiating additional employee training to ensure that all employees are following relevant procedures when transmitting such information both internally and externally
Sent notification letters to the 11 New Hampshire residents affected
Changes made: Reviewing internal policies and procedures that address the transmission of this information
Implementing additional employee training to make sure that all employees understand the risks and care needed when transmitting this information both internally and externally
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(54 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dsci-20180717.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2018
Raw hash: 517b87837f6babbc8f7fdb4becdba88835340cd42e843a4ce90811cb14af345f

Reporting entityDSCI, LLC

Victim entityDSCI, LLC

Incidentdiscovered May 24, 2018

Stated responseCompleted its investigation into the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov