PhysicalTechnologyInformationTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Quantum

bd_ffb940b914ed3aef · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2010

Filed

Jun 17, 2010

To disclose

3 days

Affected

4state residents only

Confidence

66%

Full breach record for Quantum →2 incidents on file

Quantum Corporation notified the New Hampshire Attorney General of a break-in at its Bellevue, WA office on June 13, 2010, resulting in the theft of laptops containing employee sensitive personal information, including SSNs. Four New Hampshire residents were affected. Notices were sent on June 17, 2010, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 3 days

Jun 13, 2010

Begins

Jun 14, 2010

Discovered

Jun 17, 2010

Filed

vs. sector median

18 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Quantum
norm: quantum
Domain: qtmi.net

Name: Quantum
norm: quantum
Domain: qtmi.net
Industry: Technologyllm

Discovered: Jun 14, 2010
Breach occurred: Jun 13, 2010 – Jun 13, 2010
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jun 17, 2010
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Consumer Protection & Antitrust Bureau

During the incident: Working with in-house and outside resources to evaluate physical and data security processes
Reviewing IT repair work processes
Notified all impacted employees
Set up a credit monitoring service for a term of one year to be provided at no cost to all impacted persons
Working with TransUnion to provide credit monitoring services
Changes made: Reviewing its security procedures to evaluate the opportunity to take additional actions to prevent a similar security breach in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 3 days(3 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/quantum-20100617.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2010
Raw hash: 241e403b6f7efadce93a07bdb69007c08870e4d7d27ab60e0f269d6a111f7493

Reporting entityQuantum

Victim entityQuantum

Incidentdiscovered Jun 14, 2010

Stated responseWorking with in-house and outside resources to evaluate physical and data security processes

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov