AccidentalHealthcareHealthcareMisdeliveryEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountMediumResolved

Sekisui Diagnostics, LLC

bd_d92686240d34777c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 6, 2018

Filed

Apr 26, 2018

To disclose

20 days

Affected · nationwide

1946 in this filing

Linked

2 filings

Confidence

65%

Full breach record for Sekisui Diagnostics, LLC →

Sekisui Diagnostics, LLC experienced an accidental email misdelivery on April 6, 2018, where a file containing W2s for 194 U.S. employees was inadvertently attached to an email intended for a former employee. The former employee promptly deleted the email and notified Sekisui. Forensic review confirmed the data was not saved, forwarded, or copied. The incident affected 6 New Hampshire residents. Sekisui offered one year of free credit monitoring to affected employees and is reviewing policies and training procedures.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 20 days

Apr 6, 2018

Begins

Apr 6, 2018

Discovered

Apr 26, 2018

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_55e1a413350efc252018-04-26Verified

Name: Sekisui Diagnostics, LLC
norm: sekisui diagnostics
Domain: sekisuidiagnostics.com

Name: Sekisui Diagnostics, LLC
norm: sekisui diagnostics
Domain: sekisuidiagnostics.com
Industry: Healthcarellm

Discovered: Apr 6, 2018
Breach occurred: Apr 6, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 13, 2018
Affected individuals: 194state + nationwide
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unknown
Regulator citations: Notified New Hampshire Attorney General's Office

During the incident: Hired a forensics computer consultant to review the email, computer files and entire hard drive of the former employee
Offering one free year of credit monitoring services to each affected employee upon request
Changes made: Reviewing our policies and procedures
Developing training to include increased awareness of safeguarding confidential data, email and file encryption and any additional countermeasures we determine are appropriate
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 26 · first

New Hampshire State AGApr 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/sekisui-20180426.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 26, 2018
Raw hash: 7b0cf53581d2fc2c0b2d08794c27a92e3f2c496bae5012f6632109f2e1fbb98e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySekisui Diagnostics, LLC

Victim entitySekisui Diagnostics, LLC

Incidentdiscovered Apr 6, 2018

Stated responseHired a forensics computer consultant to review the email, computer files and entire hard drive of the former employee

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov