PhysicalFinancial ServicesTechnologyFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDMediumContained

HENRY SCHEIN, INC.

bd_e850d1d9993f2ef4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 23, 2007

Filed

Apr 17, 2007

To disclose

8 weeks

Affected · nationwide

3401 in this filing

Confidence

67%

Full breach record for HENRY SCHEIN, INC. →6 incidents on file

Henry Schein Financial Services, Inc. reported the theft of an unencrypted laptop containing customer names and SSNs from a hotel in Chicago. The incident was discovered on Feb 23, 2007. Approximately 340 customers were potentially affected, including 1 NH resident. The company notified the NH AG and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 53 days

Feb 23, 2007

Discovered

Apr 17, 2007

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed340 affectedView incident

Name: HENRY SCHEIN, INC.
norm: henry schein
Domain: henryschein.com

Name: HENRY SCHEIN, INC.
norm: henry schein
Domain: henryschein.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Feb 23, 2007
Materiality determined: —
Notification sent: —
Affected individuals: 340state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General's Office

During the incident: Reported the theft to the Chicago Police Department
Notifying all affected individuals via written letter
Offering one year of complimentary credit monitoring through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/henry-schein-20070417.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 17, 2007
Raw hash: aee6e584c15f6c841fdf78528faced6ec135e3cf45370b78093a26260e5f5f78

Reporting entityHENRY SCHEIN, INC.

Victim entityHENRY SCHEIN, INC.

Incidentdiscovered Feb 23, 2007

Stated responseReported the theft to the Chicago Police Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov