HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumActive
Morley
bd_dc3604c81ee0700e · schema v1 · pii pii-v1
Full breach record for Morley →Morley Companies Inc. notified the New Hampshire Attorney General of a data security incident discovered on August 1, 2021. An unknown actor gained unauthorized access to Morley's network, potentially exposing personal information for approximately two New Hampshire residents, including names, SSNs, driver's license numbers, and health information. Morley engaged cybersecurity experts, notified the FBI, and is offering credit monitoring services. Notification letters were sent on January 26, 2022.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1f725c594085ad56Montana State AGfiled 2022-01-26Candidate
- bd_2116a0563276834aSouth Carolina State AGfiled 2022-01-27(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/morley-companies-20220126.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 26, 2022
- Raw hash
- 90dab32c987aa685173a16d86e3b8a1f55fec050b4eb02c0b3257fbf89021544
Reporting entity
- Name
- Lewis Brisbois Bisgaard & Smith, PLLCnorm: lewis brisbois bisgaard smith
Victim entity
- Name
- Morleynorm: morley
- Domain
- shopmorley.com
Incident
- Discovered
- Aug 1, 2021
- Materiality determined
- —
- Notification sent
- Jan 26, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 25 weeks(178 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.