Bright Horizons Family Solutions, via subsidiary EasyDraft, notified New Hampshire AG of a data breach affecting 30 state residents. Between October 8, 2012, and January 8, 2014, a website hosting personal banking information (names, bank routing/account numbers) was publicly accessible due to a server misconfiguration. EasyDraft shut down the site on Jan 8, 2014, engaged forensic reviewers, and provided one year of Kroll identity protection services to affected individuals.
Affected (this filing): 30