HackingTechnologyInformationSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

OpenClose, a

bd_cd2bc2a77add973d · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 18, 2021

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for OpenClose, a →

OpenClose (DBA of Beanstalk Networks, LLC) notified the NH Attorney General that a security researcher accessed and downloaded log files from a server managed by a third-party provider on or about June 4, 2021. The logs may have contained full names and Social Security numbers of approximately two New Hampshire residents. The server was secured, a forensic investigation was conducted, and the researcher confirmed deletion of the data. Affected residents were notified in October 2021 and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 4, 2021

Begins

Oct 18, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_2ccac4cd5f7e015e2021-10-15 · +3dCandidate
Massachusetts State AGbd_2df5d7dd431398f92021-10-15 · +3dVerified
Indiana State AGbd_5f91dcf2e3f8edd32021-10-15 · +3dVerified

Name: OpenClose, a
norm: openclose a

Name: OpenClose, a
norm: openclose a
Industry: Technologyllm

Discovered: —
Breach occurred: Jun 4, 2021
Materiality determined: —
Notification sent: Oct 15, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, New Hampshire
Third party: via third party provider

During the incident: Secured the server
Commenced a prompt and thorough investigation with the aid of a forensic cybersecurity firm
Obtained written verification from the security researcher that the sensitive information was deleted
Notified clients of the incident on August 23, 2021
Providing affected residents with written notification of this incident commencing on or about October 15, 2021
Offering the affected residents a complimentary one-year membership with a credit monitoring service
Changes made: Continually evaluates and modifies its practices and internal controls to secure personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGOct 15 · first

Massachusetts State AGOct 15 · first

Indiana State AGOct 15 · first

New Hampshire State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/beanstalk-networks-dba-openclose-20211018.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 18, 2021
Raw hash: 914a934f72485152d07f444e8c3a9eb123a0ecec47bd218f17f24643313d3137

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityOpenClose, a

Victim entityOpenClose, a

IncidentThird-Party / Supply Chain

Stated responseSecured the server

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov