HackingStolen CredentialsCustomer Data InvolvedTargetedPCIFINANCIAL_ACCOUNTLowContained
LaborLawCenter, Inc
bd_e9d574ed4fcea4de · schema v1 · pii pii-v1
Full breach record for LaborLawCenter, Inc →LaborLawCenter, Inc. notified the New Hampshire AG of a data event affecting 47 state residents. Between Jan 23 and Feb 28, 2023, an unauthorized actor placed malicious code on the company's payment platform to capture payment card information. The breach was discovered on Jan 23, 2023. Notices were sent to affected individuals on April 25, 2023.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1189e115774946d4Montana State AGfiled 2023-04-25(6d gap)Candidate
- bd_3653e90fb76c9d81Maine State AGfiled 2023-04-25(6d gap)Candidate
- bd_4e0dcd21e77e9e25California State AGfiled 2023-04-25(6d gap)Verified
- bd_5d3a794846a4a989Vermont State AGfiled 2023-04-25(6d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/laborlawcenter-20230501.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2023
- Raw hash
- b256235e84b18097e3f70c4869e6d7aa9d67c0dc947c128e04e02a5e84c31e73
Reporting entity
- Name
- LaborLawCenter, Incnorm: laborlawcenter
Victim entity
- Name
- LaborLawCenter, Incnorm: laborlawcenter
Incident
- Discovered
- Jan 23, 2023
- Materiality determined
- Mar 22, 2023
- Notification sent
- Apr 25, 2023
- Affected individuals
- 47
- Data types
- PCIFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1056 Input Capture
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Office of the New Hampshire Attorney GeneralNotified the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.