AccidentalFinancial ServicesFinanceLossCustomer Data InvolvedIdentity (basic)Government IDHighContained

The Hartford Financial Services Group

bd_f88967cfd85e2f26 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 27, 2007

Filed

Oct 4, 2007

To disclose

7 days

Affected

3,500state residents only

Confidence

67%

Full breach record for The Hartford Financial Services Group →12 incidents on file

The Hartford notified the NH AG on Oct 4, 2007, that three backup data tapes containing PII (names, SSNs, driver's licenses) were misplaced on Sept 27, 2007. ~3,500 NH residents affected. No evidence of theft/access. Remediation includes encryption and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 days

Sep 27, 2007

Discovered

Oct 4, 2007

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,500 affectedView incident

Name: The Hartford Financial Services Group
norm: the hartford financial

Name: The Hartford Financial Services Group
norm: the hartford financial
Industry: Financial Servicesllm

Discovered: Sep 27, 2007
Materiality determined: —
Notification sent: Oct 4, 2007
Affected individuals: 3,500state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified New Hampshire Office of Attorney General

During the incident: Reconstructed the data that was on the tapes
Providing notification to all affected individuals
No longer shipping tapes via standard carriers
Using secure electronic data replication and transmission
Providing one-year Equifax Credit Watch Gold 3-in-1 Monitoring identity theft protection service
Reimbursing cost of credit freeze
Changes made: Deploying encryption for the most sensitive information
Implemented additional security measures in handling customer data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hartford-20071004.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 4, 2007
Raw hash: 1a30f06d898e6f7bd05f79c396db005e0cd648447b78065e03905a4a5d86d9e8

Reporting entityThe Hartford Financial Services Group

Victim entityThe Hartford Financial Services Group

Incidentdiscovered Sep 27, 2007

Stated responseReconstructed the data that was on the tapes

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov