HackingVulnerability ExploitCapture Stored DataZero-DayData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
TPA Technologies
bd_de3772d0f114952f · schema v1 · pii pii-v1
Full breach record for TPA Technologies →TPA Technologies notified New Hampshire residents of a data breach involving its former payroll vendor, Paycor. Paycor was impacted by zero-day vulnerabilities in MOVEit Transfer disclosed by Progress Software in May/June 2023. TPA learned of the impact on December 18, 2023. The incident involved unauthorized access to employee payroll data. TPA terminated its relationship with Paycor and offered credit monitoring via Experian to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/professional-alternative-aka-tpa-technologies-20240118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 18, 2024
- Raw hash
- b315ef0c04ffb641455a58ea7140a6340e5c6853485359e2fdcb496a42ef8ea3
Reporting entity
- Name
- TPA Technologiesnorm: tpa technologies
Victim entity
- Name
- TPA Technologiesnorm: tpa technologies
Incident
- Discovered
- Dec 18, 2023
- Materiality determined
- —
- Notification sent
- Jan 18, 2024
- Affected individuals
- 5
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided written notice to relevant state regulators
- Third party
- via Paycor
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.