JFYNetWorks, a Boston-based non-profit, notified the NH Attorney General on June 12, 2009, of a June 3, 2009, cyber incident. An attacker exploited a publicly accessible web application to gain unauthorized access, posting obscene messages and altering press releases. The attacker also sent emails to program applicants claiming to possess their PII, including SSNs. Six New Hampshire residents were affected. JFY disabled the site, notified law enforcement, and offered one year of Equifax credit monitoring and identity theft insurance to affected individuals.
Affected (this filing): 6