HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
KFI Engineers
bd_fa5c53d15af849a3 · schema v1 · pii pii-v1
Full breach record for KFI Engineers →KFI Engineers, an engineering consulting firm, disclosed a cybersecurity incident discovered on December 6, 2022, involving unauthorized access to its network. The breach potentially exposed personal information of one New Hampshire resident, including full name, driver's license, SSN, passport info, and residential address. KFI engaged forensic investigators, secured the network, and offered 12 months of credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/kfi-engineers-20230221.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 21, 2023
- Raw hash
- 715695925d5805d69664df80a242ac1f4c9584a45c2b3f3f7036121a320dd8dc
Reporting entity
- Name
- KFI Engineersnorm: kfi engineers
Victim entity
- Name
- KFI Engineersnorm: kfi engineers
Incident
- Discovered
- Dec 6, 2022
- Materiality determined
- —
- Notification sent
- Feb 13, 2023
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 11 weeks(77 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.