Social EngineeringManufacturingTechnologyManufacturingPhishingEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumContained

ABB

bd_c71bd5c692d2dea7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 25, 2017

Filed

Sep 11, 2017

To disclose

17 days

Affected

23state residents only

Linked

5 filings

Confidence

66%

Full breach record for ABB →2 incidents on file

ABB, Inc. notified the NH Attorney General that a phishing scheme targeting employee email accounts on August 25, 2017, may have exposed personal information of 23 New Hampshire residents. Affected data includes names, addresses, dates of birth, plan member IDs, social security numbers, medical records, and direct deposit information for some hourly staff. ABB provided 12 months of identity monitoring services via Kroll and is reviewing security policies.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 days

Aug 25, 2017

Begins

Aug 25, 2017

Discovered

Sep 11, 2017

Filed

vs. sector median

8 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_b0f3f8a56b64160d2017-09-11Verified
Massachusetts State AGbd_f813098da8386b762017-09-11Verified
South Carolina State AGbd_6b90897c6f9b02812017-09-12 · +1dVerified
Montana State AGbd_9956c249d34e54fe2017-09-18 · +7dCandidate

Name: ABB, Inc.
norm: abb

Name: ABB
norm: abb
Domain: careers.abb
Industry: ManufacturingllmTechnologyllm

Discovered: Aug 25, 2017
Breach occurred: Aug 25, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 11, 2017
Affected individuals: 23state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General pursuant to N.H. Rev. Stat. Ann. s. 359-C:20(I)(b)
Initial access: phishing_link

During the incident: Conducted a full assessment to determine the scope of the data loss
Continues to monitor the situation
Provided 12 months free identity monitoring services, including credit monitoring, web watcher, and identity consultation and restoration services, provided by Kroll
Provided affected residents with a toll-free number to call with questions
Changes made: Diligently reviewing its security policies to identify any unusual activity
Evaluating the policy regarding how employees handle personal information in an email account
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 days(17 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGSep 11 · first

Massachusetts State AGSep 11 · first

New Hampshire State AGSep 11 · first · this page

South Carolina State AG+1d

Montana State AG+7d

Pattern: first filing Sep 11 (CA), last Sep 18 (MT) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/abb-20170911.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 11, 2017
Raw hash: 51199d373a02683bf116b58e3dd0bfbd1e1bf3ca0a0c5787e36355efa36c5d18

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityABB, Inc.

Victim entityABB

Incidentdiscovered Aug 25, 2017

Stated responseConducted a full assessment to determine the scope of the data loss

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov