Empathia

Empathia, Inc. notified the New Hampshire Attorney General of a data event affecting 72 state residents. On January 30, 2016, spam files were discovered on a data server. The server contained personal information (names, addresses, phone numbers, SSNs) of individuals who requested credit checks in 2003-2004. No evidence of actual misuse was found, but notice was provided out of caution. Affected individuals received credit monitoring services.

Affected (this filing): 72

Empathia, Inc., a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2016-01-30 and filed notice on 2016-06-06. 602 Washington residents were affected. 128 days elapsed between awareness and notification. 0 days to contain the breach.

Affected (this filing): 602

Empathia, Inc. discovered spam files on a data server on January 30, 2016. A forensic investigation revealed the spam spread to a second domain containing a file with customer information (name, address, phone, SSN) from 2003-2004. No evidence of data access or misuse was found; the unauthorized access appeared intended only to spread spam. Empathia engaged a third-party forensic investigator, increased IT security, and offered 12 months of credit monitoring.