HackingManufacturingManufacturingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountLowContained

Eye Safety Systems, Inc.

bd_c93553e204a3732c · schema v1 · pii pii-v1

Severity

Low

Discovered

May 27, 2011

Filed

Jul 28, 2011

To disclose

9 weeks

Affected

132state residents only

Linked

2 filings

Confidence

66%

Full breach record for Eye Safety Systems, Inc. →2 incidents on file

Eye Safety Systems, Inc. notified NH DOJ of a May 2011 breach of its third-party web hosting server. Unauthorized access to a customer database containing names, addresses, and credit card data (plus potential decryption keys) was discovered on May 27, 2011. 132 NH residents were notified by mail on July 29, 2011, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 26 days

discovery → filing · 9 weeks / 62 days

May 1, 2011

Begins

May 27, 2011

Discovered

Jul 28, 2011

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_09528c64d11cde742011-08-01 · +4dVerified

Name: Eye Safety Systems, Inc.
norm: eye safety
Domain: esseyepro.com

Name: Eye Safety Systems, Inc.
norm: eye safety
Domain: esseyepro.com
Industry: Manufacturingllm

Discovered: May 27, 2011
Breach occurred: May 1, 2011 – May 31, 2011
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 29, 2011
Affected individuals: 132state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Providing notice to NH Department of JusticeNotifying national consumer reporting agencies
Initial access: supply_chain

During the incident: Notified customers by e-mail
Began an investigation
Took measures to secure the website
Website is now hosted on a dedicated server
Implementing heightened monitoring procedures
Overhauling the way data is processed, encrypted, and retained
Providing free credit monitoring service for one year
Changes made: Website is now hosted on a dedicated server
Implementing heightened monitoring procedures
Overhauling the way data is processed, encrypted, and retained
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJul 28 · first · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/eye-safety-20110728.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 28, 2011
Raw hash: f7d48963e6cd411850ba0056c7e6c351e5fcb7d551524ee4ab6efd8c7e5bc7cf

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEye Safety Systems, Inc.

Victim entityEye Safety Systems, Inc.

Incidentdiscovered May 27, 2011

Stated responseNotified customers by e-mail

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov