PhysicalTechnologyFinancial ServicesInformationTheftCustomer Data InvolvedIdentity (basic)Government IDMediumContained

CS STARS LLC

bd_e2ad3093d6abf160 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 2, 2009

To disclose

—

Affected

94state residents only

Confidence

66%

Full breach record for CS STARS LLC →

CS STARS LLC reported the theft of an unencrypted portable hard drive from an employee on May 9, 2009. The drive potentially contained names and Social Security Numbers of 94 New Hampshire residents who were claimants for workers' compensation benefits. CS STARS notified the NH Attorney General, filed a police report, and offered credit monitoring services via Kroll Inc. to affected individuals. The company stated it does not believe the data was accessed or misused.

J jump to incidentP pin to compareR raw source

Incident timeline

May 9, 2009

Begins

Jun 2, 2009

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed94 affectedView incident

Name: CS STARS LLC
norm: cs stars
Domain: csstars.com

Name: CS STARS LLC
norm: cs stars
Domain: csstars.com
Industry: TechnologyllmFinancial Servicesllm

Discovered: —
Breach occurred: May 9, 2009
Materiality determined: —
Notification sent: Jun 2, 2009
Affected individuals: 94state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified the New Hampshire Attorney GeneralNotified the appropriate regulators

During the incident: Filed a police report following discovery of the theft
Promptly informed the information owner
Retained Kroll Inc. to provide toll-free access to Kroll's Consumer Solutions Center, along with credit monitoring services and identity restoration services at no cost to the potentially affected individuals
Alerting potentially affected individuals about the situation
Notifying the appropriate regulators and three major credit reporting repositories (Experian, Equifax and TransUnion)
Changes made: Re-training its employees on the proper use and storage of personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cs-stars-20090602.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2009
Raw hash: 73ada6ad3b5c84e8f35c63e554caa2e89bf3b879490aff41feef329d1843d47e

Reporting entityCS STARS LLC

Victim entityCS STARS LLC

IncidentUnknown

Stated responseFiled a police report following discovery of the theft

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov