HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Financial accountLowContained

National Association of Manufacturers

bd_d803eab30992fd4b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 21, 2020

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for National Association of Manufacturers →

The National Association of Manufacturers (NAM) notified the NH Attorney General of unauthorized access to certain employee email accounts between December 7, 2018, and April 29, 2019. The incident affected one New Hampshire resident, whose name and credit/debit card information were present in the accessed emails. NAM engaged forensic investigators, reset passwords, and offered one year of credit monitoring via Kroll. The investigation did not confirm if data was viewed or misused.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 7, 2018

Begins

Jan 21, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_9fbf03eadd7984702020-01-16 · +5dVerified
Indiana State AGbd_dd5de32de6d2801b2020-01-16 · +5dVerified

Name: National Association of Manufacturers
norm: national association of manufacturers
Domain: nam.org

Name: National Association of Manufacturers
norm: national association of manufacturers
Domain: nam.org
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 7, 2018 – Apr 29, 2019
Materiality determined: —
Notification sent: Jan 16, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1114 Email Collection
Regulator citations: Notified the Office of the New Hampshire Attorney GeneralNotified relevant state regulators

During the incident: Began an investigation with the assistance of computer forensic investigators
Undertook a comprehensive review of the email accounts to determine whether they contained any sensitive information
Resetting relevant passwords
Reviewing internal systems to identify contact information for purposes of providing notice to potentially affected individuals
Providing access to credit monitoring services for one (1) year, through Kroll
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Notifying relevant state regulators
Cooperating with any law enforcement investigation relating to this incident
Changes made: Reviewing and enhancing existing security policies and procedures
Conducting additional workforce training to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJan 16 · first

Indiana State AGJan 16 · first

New Hampshire State AG+5d · this page

Pattern: first filing Jan 16 (MA), last Jan 21 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/national-association-manufactures-20200121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 21, 2020
Raw hash: bb4206feaae4a615e697397f5fb93be23b859bf895cd1b2e936aef6934bfec84

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityNational Association of Manufacturers

Victim entityNational Association of Manufacturers

IncidentUnknown

Stated responseBegan an investigation with the assistance of computer forensic investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov