HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
Alaska Railroad Corporation
bd_f16b608566bf7811 · schema v1 · pii pii-v1
Full breach record for Alaska Railroad Corporation →Alaska Railroad Corporation reported that on December 25, 2022, a third party gained unauthorized access to its internal network, acquiring personal information of vendors, current and former employees, and their dependents. The incident was discovered on March 18, 2023. The company engaged law enforcement and forensic investigators, implemented additional security measures, and offered 24 months of complimentary Experian IdentityWorks to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_d11f207fee827834Montana State AGfiled 2023-04-17(2d gap)Candidate
- bd_d247296165bfa481Maine State AGfiled 2023-04-23(4d gap)Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/alaska-railroad-corporation-20230419.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 19, 2023
- Raw hash
- 23ec1169f1fa2bf9f051dd4f4558a802d5272312261d3e67b3a7b3c6befd2db8
Reporting entity
- Name
- Alaska Railroad Corporationnorm: alaska railroad
- Domain
- arrconnect.akrr.com
Victim entity
- Name
- Alaska Railroad Corporationnorm: alaska railroad
- Domain
- arrconnect.akrr.com
Incident
- Discovered
- Mar 18, 2023
- Materiality determined
- —
- Notification sent
- Apr 17, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.