MisuseRetail & ConsumerRetailPrivilege AbuseEmployee Data InvolvedTargetedFinancial accountPIILowActive

Valplast Supply Services, Inc.

bd_bd5891e0bb2cf0fc · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Dec 17, 2014

To disclose

—

Affected

7state residents only

Confidence

66%

Full breach record for Valplast Supply Services, Inc. →2 incidents on file

Valplast Supply Services, Inc. notified the NH Attorney General of a security breach involving a former temporary employee who may have wrongfully obtained credit card information from telephone orders. The incidents occurred on Oct 29 and Nov 7, 2014. Approximately 7 NH residents were affected. Notices were sent Dec 17, 2014.

J jump to incidentP pin to compareR raw source

Incident timeline

Oct 29, 2014

Begins

Dec 17, 2014

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident

Name: Valplast Supply Services, Inc.
norm: valplast supply

Name: Valplast Supply Services, Inc.
norm: valplast supply
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Oct 29, 2014 – Nov 7, 2014
Materiality determined: —
Notification sent: Dec 17, 2014
Affected individuals: 7state-resident count only
Data types: Financial accountPII
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified Office of the New Hampshire Attorney General
Initial access: insider_action

During the incident: Valplast has taken immediate steps to prevent a recurrence of these breaches of security
Investigating these possible breaches for purposes of determining additional information regarding the extent to which personal information in our database was actually compromised
Pursuing action against the individual responsible
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/valplast--supply-20141217.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 17, 2014
Raw hash: 59d7fd535826ffb88cb9b73ab8db133c1ed77795e176e8e1b92deef60392f6d0

Reporting entityValplast Supply Services, Inc.

Victim entityValplast Supply Services, Inc.

IncidentInsider

Stated responseValplast has taken immediate steps to prevent a recurrence of these breaches of security

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov