PhysicalTechnologyProfessional ServicesInformationTheftSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

SPX Technologies, Inc.

bd_e3aa48e97310eaa8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 25, 2008

Filed

Apr 15, 2008

To disclose

21 days

Affected · nationwide

4032 in this filing

Linked

2 filings

Confidence

65%

Full breach record for SPX Technologies, Inc. →2 incidents on file

SPX Corporation notified the New Hampshire Attorney General of a data breach involving a stolen laptop belonging to vendor USinternetworking, Inc. The incident, occurring on March 23, 2008, exposed personal information (names, SSNs, bank details) of 403 SPX employees, including 2 New Hampshire residents. SPX notified affected individuals on March 25, 2008, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 21 days

Mar 23, 2008

Begins

Mar 25, 2008

Discovered

Apr 15, 2008

Filed

vs. sector median

16 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_90327be1de17ac8f2008-04-22 · +7dVerified

Name: SPX Technologies, Inc.
norm: spx technologies

Name: SPX Technologies, Inc.
norm: spx technologies
Industry: TechnologyllmProfessional Servicesllm

Discovered: Mar 25, 2008
Breach occurred: Mar 23, 2008
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 25, 2008
Affected individuals: 403state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General Kelly Ayotte of New Hampshire
Initial access: removable_media

During the incident: Forwarded copy of USi's March 25, 2008, communication to each of the affected individuals
Plan to begin forwarding additional information concerning credit monitoring and identity-theft protection services
Established a help line for affected individuals
Reexamining current data privacy and security policies and procedures
Changes made: Offering one year of credit monitoring and identity-theft protection at USi's expense
Contracted with Kroll Inc. to provide ID TheftSmart service for 2 years
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 15 · first · this page

Massachusetts State AG+7d

Pattern: first filing Apr 15 (NH), last Apr 22 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/spx-20080415.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2008
Raw hash: e9db27de34cbc0b5af3d2f689d6bc693d447d86126b0acf1bed5d673ea6151ee

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySPX Technologies, Inc.

Victim entitySPX Technologies, Inc.

Incidentdiscovered Mar 25, 2008

Stated responseForwarded copy of USi's March 25, 2008, communication to each of the affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov