HackingTechnologyInformationStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

Dow Jones & Company, Inc.

bd_ec3832a5a7dd4136 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 9, 2015

To disclose

—

Affected

21state residents only

Linked

3 filings

Confidence

67%

Full breach record for Dow Jones & Company, Inc. →

Dow Jones & Company, Inc. notified the New Hampshire Attorney General on October 9, 2015, that an unauthorized third party accessed a server containing customer personal information (name, address, payment card info) for WSJ, MarketWatch, and Barron’s subscribers. 21 NH residents were notified and offered 24 months of identity protection. Access paths were closed; no evidence of ongoing access.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Oct 9, 2015

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_4aa8afcb75aa265e2015-10-09Candidate
Massachusetts State AGbd_b016736e51f2deba2015-10-09Verified

Name: Dow Jones & Company, Inc.
norm: dow jones
Domain: dowjones.com
Industry: Media & Publishing

Name: Dow Jones & Company, Inc.
norm: dow jones
Domain: dowjones.com
Industry: Media & Publishing
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: Oct 9, 2015
Affected individuals: 21state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Initiated an investigation
Identified and closed the known access paths
Taken further steps to secure systems
Examining ways to prevent incidents of this kind from happening again
Changes made: Examining ways to prevent incidents of this kind from happening again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGOct 9 · first

Massachusetts State AGOct 9 · first

New Hampshire State AGOct 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/dow-jones-20151009.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2015
Raw hash: 6b969a87794ae5c14ca4827ac23cf9c9647872b2434ea2f65fa621aabf9b0dee

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDow Jones & Company, Inc.

Victim entityDow Jones & Company, Inc.

IncidentUnauthorized Access

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov