PhysicalTechnologyInformationLossEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentHighContained

IBM

bd_c20f7c45f0abd741 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Apr 26, 2007

To disclose

—

Affected

1,468state residents only

Confidence

66%

IBM notified the NH Attorney General that data tapes containing archival employment information, including Social Security numbers, for current and former employees were lost during transport by a vendor on February 23, 2007. The incident affected 1,468 New Hampshire residents. IBM determined the loss was inadvertent with no indication of theft or unauthorized access. IBM offered one year of identity theft restoration and credit monitoring services through Kroll Inc. to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 23, 2007

Begins

Apr 26, 2007

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,468 affectedView incident

Name: IBM
norm: ibm
Domain: ibm.com

Name: IBM
norm: ibm
Domain: ibm.com
Industry: Technologyllm

Discovered: —
Breach occurred: Feb 23, 2007
Materiality determined: —
Notification sent: Apr 9, 2007
Affected individuals: 1,468state-resident count only
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified New Hampshire Attorney General's Office
Third party: via vendor

During the incident: Conducted thorough investigation of the incident
Set up toll-free hotline staffed by Kroll representatives
Provided ID TheftSmart Enhanced Identity Theft Restoration and Continuous Credit Monitoring program from Kroll Inc.
Changes made: Vendor implemented remedial measures designed to avoid recurrence
IBM reviewing its procedures and will implement appropriate remedial measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ibm-20070426.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 26, 2007
Raw hash: 43e1d6c97e1a3502b9ffc0055fc19ef67a1f037824a7bbeb82fc631fbcecb164

Reporting entityIBM

Victim entityIBM

IncidentUnknown

Stated responseConducted thorough investigation of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov