PhysicalProfessional ServicesProfessional ServicesTheftEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Caisse Alliance

bd_bde5a8276030d0a8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 19, 2014

Filed

Oct 24, 2014

To disclose

5 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Caisse Alliance →2 incidents on file

Alliance Workplace Solutions, LLC reported the theft of a company-issued laptop from an employee's vehicle on September 19, 2014. The stolen device potentially contained files with the names, dates of birth, and Social Security numbers of two New Hampshire residents who were current or former employees of Alliance clients. The company launched an internal investigation, retained forensic experts, and notified affected individuals and regulators in October 2014. One year of credit monitoring was offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Sep 19, 2014

Begins

Sep 19, 2014

Discovered

Oct 24, 2014

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Caisse Alliance
norm: caisse alliance
Domain: caissealliance.com

Name: Caisse Alliance
norm: caisse alliance
Domain: caissealliance.com
Industry: Professional Servicesllm

Discovered: Sep 19, 2014
Breach occurred: Sep 19, 2014
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 23, 2014
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Attorney GeneralProviding written notice of this incident to other state regulators

During the incident: Launched an internal investigation
Retained external forensics experts to assist in identifying the full scope of data potentially accessible on the laptop
Provided notice of this incident to its affected clients on October 16, 2014
Provided these New Hampshire residents with written notice of this incident on or about October 23, 2014
Providing written notice of this incident to other state regulators, and to the national consumer reporting agencies
Changes made: Offering access to one (1) free year of credit monitoring services and identity theft resolution services
Providing each individual with information on how to protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/alliance-workplace-solutions-20141024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 24, 2014
Raw hash: 7c9ce730a7e0245ebad27e95a7fd8149eeeb866f31e3930e5cd9657894f8f966

Reporting entityCaisse Alliance

Victim entityCaisse Alliance

Incidentdiscovered Sep 19, 2014

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov