HackingTechnologyInformationStolen CredentialsTargetedData ExfiltratedIdentity (basic)Financial accountLowContained

GoGrid LLC

bd_e587085ecb0a5dec · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 30, 2011

Filed

Apr 1, 2011

To disclose

2 days

Affected

40state residents only

Linked

2 filings

Confidence

66%

Full breach record for GoGrid LLC →

GoGrid LLC notified the NH Attorney General of unauthorized access to customer account information affecting 40 NH residents. The incident, spanning Nov 2008 to present, involved a suspect seeking free services who accessed payment card data (names, addresses, card numbers, expiration dates). GoGrid reported the incident to federal law enforcement, engaged forensic auditors, and notified customers via email and mail, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 879 days

discovery → filing · 2 days

Nov 1, 2008

Begins

Mar 30, 2011

Discovered

Apr 1, 2011

Filed

vs. sector median

18 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_7bfe5a96723454d72011-04-07 · +6dVerified

Name: GoGrid LLC
norm: gogrid
Domain: gogrid.com

Name: GoGrid LLC
norm: gogrid
Domain: gogrid.com
Industry: Technologyllm

Discovered: Mar 30, 2011
Breach occurred: Nov 1, 2008
Undetected for: 879 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2011
Affected individuals: 40state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalSecondary
Regulator citations: reported the suspected unauthorized access to federal law enforcement authorities
Initial access: valid_credentials

During the incident: Reported the suspected unauthorized access to federal law enforcement authorities
Initiated a rigorous security audit using both internal resources and an external security firm
Notified the affected customers by email
Prepared mailed notices by First Class Mail to be sent to the affected individuals and to government authorities
Notified merchant banks and processors
Adopted several new additional security procedures
Changes made: Identified and remediated the method utilized by the suspect to gain access
Adopted several additional new security procedures to guard against future unauthorized access
Engaged an external security firm to ensure that the Company’s policies and procedures are providing the best and safest services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 2 days(2 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 1 · first · this page

Massachusetts State AG+6d

Pattern: first filing Apr 1 (NH), last Apr 7 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/gogrid-20110401.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 1, 2011
Raw hash: 23263079e731ea8e88e57d6948a1de7941bb500de1eb70359d95b0bd578bf08e

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGoGrid LLC

Victim entityGoGrid LLC

Incidentdiscovered Mar 30, 2011

Stated responseReported the suspected unauthorized access to federal law enforcement authorities

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov