MalwareOtherRansomwareSupply Chain (3P Vendor)Data EncryptedPIIFinancial accountLowContained

WM Symposia, Inc.

bd_f3f74852d9ac1bcd · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 24, 2022

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for WM Symposia, Inc. →

WM Symposia, Inc. notified the New Hampshire Attorney General that its service provider, X-CD, discovered malicious code on its event registration platform between January 1, 2022, and April 20, 2022. The incident potentially exposed the name and credit card information of one New Hampshire resident. WM Symposia did not store credit card data directly. Notices were mailed to affected individuals on or about October 17, 2022.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 1, 2022

Begins

Oct 24, 2022

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_a5da2c2534729dd62022-10-20 · +4dVerified
Montana State AGbd_7b3f2a3dfe77ca5c2022-10-19 · +5dCandidate
Indiana State AGbd_820313e3b96a55752022-10-17 · +7dVerified

Name: WM Symposia, Inc.
norm: wm symposia
Domain: wmsym.org

Name: WM Symposia, Inc.
norm: wm symposia
Domain: wmsym.org
Industry: Otherllm

Discovered: —
Breach occurred: Jan 1, 2022 – Apr 20, 2022
Materiality determined: —
Notification sent: Oct 17, 2022
Affected individuals: 1state-resident count only
Data types: PIIFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1056 Input Capture
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General
Third party: via X-CD
Initial access: supply_chain

During the incident: Required and confirmed that X-CD discontinue use of its previous payment processing module and instituted use of Authorize.net for processing of credit card payments
Required X-CD to conduct a full forensic review to identify the cause and scope of the incident
Received assurance from X-CD that they have successfully removed the malicious code from their software
Hired a cybersecurity subject matter expert to evaluate and update WM Symposia security procedures and evaluate the X-CD conference platform
Updated all passwords and VPN access for all WM Symposia personnel
Conducted a vulnerability assessment for WM Symposia personnel computers and systems
Hired a Chief Information Security Officer (CISO) to evaluate the WM Symposia systems for security issues on a regular basis
Changes made: Discontinued use of previous payment processing module in favor of Authorize.net
Removed malicious code from X-CD software
Hired a Chief Information Security Officer (CISO)
Updated all passwords and VPN access for all personnel
Conducted a vulnerability assessment for personnel computers and systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGOct 17 · first

Montana State AG+2d

Massachusetts State AG+3d

New Hampshire State AG+7d · this page

Pattern: first filing Oct 17 (IN), last Oct 24 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/wm-symposia-20221024.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 24, 2022
Raw hash: cd0702e1564061860e8acec03f562f89dd86cba6e1451b383cd4173b8554676d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityWM Symposia, Inc.

Victim entityWM Symposia, Inc.

IncidentThird-Party / Supply Chain

Stated responseRequired and confirmed that X-CD discontinue use of its previous payment processing module and instituted use of Authorize.net for processing of credit card payments

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov