HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICPIILowContained
Workers' Compensation Insurance Rating Bureau of California
bd_cec940e56ca4e1c4 · schema v1 · pii pii-v1
Full breach record for Workers' Compensation Insurance Rating Bureau of California →Workers Compensation Insurance Rating Bureau of California notified NH AG of a July 9, 2025 incident where an unauthorized entity accessed its Box.com account. One NH resident's personal info (name) was acquired. WCIRB engaged forensic specialists, secured the environment, and offered 12 months of credit monitoring. No evidence of misuse found.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_137c95f7177196c3Indiana State AGfiled 2025-10-27Verified
- bd_499f1565cccef01aMaine State AGfiled 2025-10-27Candidate
- bd_c89bebb7fc860ae6Vermont State AGfiled 2025-10-27Verified
- bd_5f2e5ff2174ab56bCalifornia State AGfiled 2025-10-13(14d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 44d gap
- bd_1c5afd8ba3a6c148California State AGfiled 2025-12-10(44d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/workers-compensation-insurance-rating-bureau-california-20251027.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 27, 2025
- Raw hash
- f89db574a3f231077d7c39b447bf9dd1ade1af75327e37f88eaca9b8a43cfece
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Workers' Compensation Insurance Rating Bureau of Californianorm: workers compensation insurance rating bureau of california
Incident
- Discovered
- Jul 9, 2025
- Materiality determined
- —
- Notification sent
- Oct 27, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(110 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.