PhysicalTechnologyHealthcareInformationLossCustomer Data InvolvedGovernment IDIdentity (basic)PHIMediumContained

COMPUTER SCIENCES CORPORATION

bd_d45398684ad94cfa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2013

Filed

Apr 3, 2013

To disclose

5 weeks

Affected

274state residents only

Linked

3 filings

Confidence

66%

Full breach record for COMPUTER SCIENCES CORPORATION →

Computer Sciences Corporation (CSC) notified the NH Attorney General of a breach affecting 274 NH residents. A thumb drive containing Medicare Exclusion Database records (names, SSNs, EINs, DOBs) was lost in late February 2013 at CSC facilities in Raleigh, NC. CSC discovered the loss in early March, notified NC authorities, and offered 1 year of credit monitoring to affected residents.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 5 weeks / 33 days

Feb 28, 2013

Begins

Mar 1, 2013

Discovered

Apr 3, 2013

Filed

vs. sector median

14 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_adf4036a971617842013-04-03Candidate
Massachusetts State AGbd_22f9fb7bf8baa8172013-04-08 · +5dVerified

Name: COMPUTER SCIENCES CORPORATION
norm: computer sciences
Domain: csc.com
Industry: technology

Name: COMPUTER SCIENCES CORPORATION
norm: computer sciences
Domain: csc.com
Industry: technology
Industry: TechnologyllmHealthcarellm

Discovered: Mar 1, 2013
Breach occurred: Feb 28, 2013
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Apr 2, 2013
Affected individuals: 274state-resident count only
Data types: Government IDIdentity (basic)PHI
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified the State of North CarolinaFiled notice with New Hampshire Office of the Attorney General

During the incident: Conducted a thorough investigation and search for the missing thumb drive
Notified the State of North Carolina
Offering one year of credit monitoring and identity protection services at no cost
Established a toll-free call center to assist these individuals and answer any questions about this incident
Engaged in internal activities to improve our security practices for our work with the State of North Carolina
Engaged an outside auditor to work with us on these practices
Changes made: Engaged in internal activities to improve our security practices for our work with the State of North Carolina
Engaged an outside auditor to work with us on these practices
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGApr 3 · first

New Hampshire State AGApr 3 · first · this page

Massachusetts State AG+5d

Pattern: first filing Apr 3 (CA), last Apr 8 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/computer-sciences-20130403.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2013
Raw hash: df56977424d777224a111d72176ac9575430b8e23b6abdd66b11cb1163e664d9

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCOMPUTER SCIENCES CORPORATION

Victim entityCOMPUTER SCIENCES CORPORATION

Incidentdiscovered Mar 1, 2013

Stated responseConducted a thorough investigation and search for the missing thumb drive

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov