HackingTechnologyInformationStolen CredentialsTargetedData ExfiltratedIdentity (basic)LowContained

NSC Technologies

bd_d49f87bb58ae8cfa · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 26, 2023

Filed

Nov 21, 2023

To disclose

21 weeks

Affected

20state residents only

Linked

7 filings

Confidence

64%

Full breach record for NSC Technologies →2 incidents on file

NSC Technologies notified individuals of a cyberattack where an unauthorized actor acquired files between June 19-20, 2023. The company detected suspicious activity on June 26, 2023, engaged forensic specialists, and notified law enforcement. Impacted data included names and other personal information. The company provided credit monitoring and identity theft recovery services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 21 weeks / 148 days

Jun 19, 2023

Begins

Jun 26, 2023

Discovered

Nov 21, 2023

Filed

vs. sector median

+2 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Washington State AGbd_312633707198f0192023-11-21Candidate
California State AGbd_76dcf1263ed9f3fd2023-11-21Verified
Massachusetts State AGbd_7e34774244b899fe2023-11-21Verified
New Hampshire State AGbd_9f7838dcda55b41c2023-11-21Verified

Show 2 more filings ↓

Hawaii State AGbd_a1d77017365778202023-11-21Verified
Maine State AGbd_ae0faab99f9db98b2023-11-21Verified by operator

Name: NSC Technologies
norm: nsc technologies

Name: NSC Technologies
norm: nsc technologies
Industry: Technologyllm

Discovered: Jun 26, 2023
Breach occurred: Jun 19, 2023 – Jun 20, 2023
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 21, 2023
Affected individuals: 20state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: promptly notified federal law enforcement
Initial access: valid_credentials

During the incident: Took steps to confirm the security our systems
Began a comprehensive investigation to determine the full nature, scope, and impact of the activity
Promptly notified federal law enforcement
Conducted a thorough and time-consuming review of the files likely affected
Implemented additional security measures to mitigate risk associated with this incident
Providing notice of this incident to potentially impacted individuals and to regulators where required
Providing you with complimentary access to credit and CyberScan monitoring
Providing a $1,000,000 insurance reimbursement policy
Providing fully managed id theft recovery services through IDX
Changes made: Continue to review and enhance our existing policies and procedures relating to data protection and security
Implemented additional security measures to mitigate risk associated with this incident and to help prevent similar future incidents
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(148 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGNov 21 · first

California State AGNov 21 · first

Massachusetts State AGNov 21 · first

New Hampshire State AGNov 21 · first

Hawaii State AGNov 21 · first

Maine State AGNov 21 · first

Montana State AGNov 21 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-879.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 21, 2023
Raw hash: 0fc2952d53b095a6d76826b97a667f99d9b2fb88bafcf48c53ad967899d22a3a

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityNSC Technologies

Victim entityNSC Technologies

Incidentdiscovered Jun 26, 2023

Stated responseTook steps to confirm the security our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov