HackingGovernment IDIdentity (basic)MediumContained

E.W. Wylie Corporation

bd_c375a9ca5674adf9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 25, 2020

Filed

Nov 16, 2020

To disclose

7 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for E.W. Wylie Corporation →

E.W. Wylie Corporation notified the New Hampshire Attorney General of a security incident discovered on September 25, 2020. An unauthorized individual accessed documents containing the name and Social Security Number of one NH resident. Notification was mailed on November 13, 2020, offering one year of credit monitoring via Kroll. The company engaged forensic investigators and enhanced network security.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 52 days

Sep 25, 2020

Discovered

Nov 16, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_5beecad9f66f85b22020-11-13 · +3dVerified
Montana State AGbd_902de6c17ebf5c8c2020-11-13 · +3dCandidate

Name: E.W. Wylie Corporation
norm: ew wylie

Name: E.W. Wylie Corporation
norm: ew wylie

Discovered: Sep 25, 2020
Materiality determined: —
Notification sent: Nov 13, 2020
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Engaged an independent computer forensic firm
Mailed a notification letter to the New Hampshire resident
Offered a complimentary, one year membership to credit monitoring and identity protection services
Established a dedicated, toll-free call center
Alerted the three major consumer reporting agencies
Changes made: Implemented additional measures and changes to enhance the security of its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(52 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGNov 13 · first

Montana State AGNov 13 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/e-w-wylie-20201116.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 16, 2020
Raw hash: fafd2b3aae8ce1069f1b756a26c8b1b7a61f9822c20c2d4bb4f36a7324c8f7d9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityE.W. Wylie Corporation

Victim entityE.W. Wylie Corporation

Incidentdiscovered Sep 25, 2020

Stated responseEngaged an independent computer forensic firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov