HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
The Roman Catholic Diocese of Phoenix
bd_d755e9932593eaf0 · schema v1 · pii pii-v1
Full breach record for The Roman Catholic Diocese of Phoenix →The Roman Catholic Diocese of Phoenix notified the New Hampshire Attorney General on April 16, 2024, regarding a cybersecurity incident discovered on January 17, 2024. An unauthorized actor accessed network files, including pension and employee benefits data. The Diocese engaged forensic investigators, reconstructed data to identify affected individuals, and sent notification letters on April 15, 2024, offering credit monitoring services. No evidence of fraudulent misuse was found at the time of filing.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_55a46e7d1faaf1e0Maine State AGfiled 2024-04-16Verified
- bd_c450077dfa735ee8Montana State AGfiled 2024-04-16Verified
- bd_b4e501101f035004Indiana State AGfiled 2024-04-15(1d gap)Verified
- bd_f9030ecfd1c54da9California State AGfiled 2024-04-15(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/roman-catholic-diocese-phoenix-20240416.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 16, 2024
- Raw hash
- a458538f1a9be4c37cee528b3c5a7daaed6d85c9ffcdd57a623a6240567a3adb
Reporting entity
- Name
- The Roman Catholic Diocese of Phoenixnorm: the roman catholic diocese of phoenix
Victim entity
- Name
- The Roman Catholic Diocese of Phoenixnorm: the roman catholic diocese of phoenix
Incident
- Discovered
- Jan 17, 2024
- Materiality determined
- —
- Notification sent
- Apr 15, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.