-----BEGIN PRIVACY-ENHANCED MESSAGE----- Proc-Type: 2001,MIC-CLEAR Originator-Name: webmaster@www.sec.gov Originator-Key-Asymmetric: MFgwCgYEVQgBAQICAf8DSgAwRwJAW2sNKK9AVtBzYZmr6aGjlWyK3XmZv3dTINen TWSM7vrzLADbmYQaionwg5sDW3P6oaM5D3tdezXMm7z1T+B+twIDAQAB MIC-Info: RSA-MD5,RSA, EnK+8X/rXNhYrJImUW9R0V/aXVNd/oJbDPTJF2pkp8wL+hLPV+OmwawNfT1icCr8 2nTrkiR04O7fWS+FFwYG4Q== 0001157523-06-000804.txt : 20060130 0001157523-06-000804.hdr.sgml : 20060130 20060130080026 ACCESSION NUMBER: 0001157523-06-000804 CONFORMED SUBMISSION TYPE: 8-K PUBLIC DOCUMENT COUNT: 2 CONFORMED PERIOD OF REPORT: 20060130 ITEM INFORMATION: Regulation FD Disclosure ITEM INFORMATION: Financial Statements and Exhibits FILED AS OF DATE: 20060130 DATE AS OF CHANGE: 20060130 FILER: COMPANY DATA: COMPANY CONFORMED NAME: NIC INC CENTRAL INDEX KEY: 0001065332 STANDARD INDUSTRIAL CLASSIFICATION: SERVICES-MANAGEMENT CONSULTING SERVICES [8742] IRS NUMBER: 522077581 STATE OF INCORPORATION: CO FISCAL YEAR END: 1231 FILING VALUES: FORM TYPE: 8-K SEC ACT: 1934 Act SEC FILE NUMBER: 000-26621 FILM NUMBER: 06559953 BUSINESS ADDRESS: STREET 1: 12 CORPORATE WOODS 10975 BENSON STREET STREET 2: SUITE 390 CITY: OVERLAND PARK STATE: KS ZIP: 66210 MAIL ADDRESS: STREET 1: 12 CORPORATE WOODS 10975 BENSON STREET STREET 2: SUITE 390 CITY: OVERLAND PARK STATE: KS ZIP: 66210 FORMER COMPANY: FORMER CONFORMED NAME: NATIONAL INFORMATION CONSORTIUM DATE OF NAME CHANGE: 19990618 FORMER COMPANY: FORMER CONFORMED NAME: NATIONAL INFORMATION CONSORTIUM INC DATE OF NAME CHANGE: 19990504 8-K 1 a5067124.txt 8-K FOR NIC UNITED STATES SECURITIES AND EXCHANGE COMMISSION WASHINGTON, D.C. 20549 ---------- FORM 8-K CURRENT REPORT PURSUANT TO SECTION 13 OR 15(d) OF THE SECURITIES EXCHANGE ACT OF 1934 Date of Report (Date of Earliest Event Reported): January 30, 2006 ---------------- NIC INC. -------- (Exact name of registrant as specified in its charter) Colorado 000-26621 52-2077581 -------- --------- ---------- (State or other jurisdiction of (Commission (I.R.S. Employer incorporation or organization) File Number) Identification No.) 10540 South Ridgeview Road Olathe, Kansas 66061 -------------------- (Address of principal executive offices, including zip code) (877) 234-3468 -------------- (Registrant's telephone number, including area code) Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions (see General Instruction A.2. below): [ ] Written communications pursuant to Rule 425 under the Securities Act (17 CFR 230.425) [ ] Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12) [ ] Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b)) [ ] Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c)) ITEM 7.01 REGULATION FD DISCLOSURE On January 30, 2006, NIC Inc. issued a press release announcing that the security breach which allowed an unauthorized party to gain access to the state of Rhode Island's official Web site (www.RI.gov) and obtain personal information that was stored in one of the portal's servers was discovered and corrected on December 28, 2005, the same day it occurred. NIC operates the Rhode Island portal through a contract between its New England Interactive, LLC subsidiary and the state. A copy of the press release is furnished to the United States Securities and Exchange Commission with this report on Form 8-K as Exhibit 99. ITEM 9.01 FINANCIAL STATEMENTS AND EXHIBITS (c) Exhibits 99 - Press release issued by NIC Inc. dated January 30, 2006 SIGNATURES Pursuant to the requirements of the Securities Exchange Act of 1934, the Registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized. NIC Inc. Date: January 30, 2006 /s/ Stephen M. Kovzan --------------------- Stephen M. Kovzan Vice President, Financial Operations Chief Accounting Officer EX-99 2 a5067124ex99.txt NIC EXHIBIT 99 PRESS RELEASE Exhibit 99 NIC Says Rhode Island Security Breach Discovered and Vulnerability Corrected Same Day It Occurred PROVIDENCE, R.I.--(BUSINESS WIRE)--Jan. 30, 2006--eGovernment provider NIC (Nasdaq:EGOV) today said that the security breach which allowed an unauthorized party to gain access to the state of Rhode Island's official Web site (www.RI.gov) and obtain personal information that was stored in one of the portal's servers was discovered and corrected on December 28, 2005, the same day it occurred. NIC operates the Rhode Island portal through a contract between its New England Interactive, LLC, subsidiary and the state. NIC said that the security breach was due to an isolated software error. The Company also said the isolated software error that allowed the breach was immediately corrected. The Company said that its investigation to date has revealed that information, including full credit card numbers for 4,117 credit cards, was obtained. The affected cards were used in transactions conducted between December 31, 2004, and March 8, 2005. NIC said that following an initial investigation, New England Interactive reported the incident to the office of the Rhode Island Chief Information Officer on December 29, 2005. On the same day, New England Interactive also notified the Providence office of the United States Secret Service, which investigates international computer crime, and the credit card companies to enable them to monitor for fraudulent activity. Initial evidence indicated that only a handful of credit card numbers may have been stolen. On the afternoon of January 25, 2006, NIC became aware of information on a Russian language Web site that appeared to discuss the incident. New England Interactive worked to verify and cross-reference certain information on that Web site against information available to New England Interactive to determine whether any portion of it could be true. On January 26, NEI informed NIC, and again notified the office of the Rhode Island Chief Information Officer, along with the Secret Service and credit card companies, that additional credit cards in fact appeared to be involved. Further research revealed that information, including full credit card numbers for 4,117 credit cards, was obtained. NIC said that the investigation is continuing. As a precaution, the Company is recommending that citizens who have provided credit card information to the Rhode Island portal contact the credit card companies whose cards they used online and request that their accounts be monitored for potential fraudulent activity. "NIC takes security matters very seriously," said Harry Herington, Chief Operating Officer of NIC. "We take responsibility for this incident and acted immediately to correct the breach upon discovering it. We will continue to work with Rhode Island state officials, law enforcement, and the credit card companies to resolve this issue." NIC manages 18 state portals through its subsidiaries. Each operation maintains an independent technology structure, and as noted earlier, the software error in Rhode Island was an isolated issue not present in other NIC-managed portals. The Company conducted an internal audit of RI.gov's security procedures following the incident and maintains a contract with a third party security assessor for regular audits of every operation it supports. Each NIC portal operation has been subject to extensive security evaluations prior to and following this incident, and the Company is confident that it maintains appropriate security measures. About NIC NIC manages more eGovernment services than any provider in the world. The Company helps government communicate more effectively with citizens and businesses by putting essential services online. NIC provides eGovernment solutions for 2,000 state and local agencies that serve 60 million people in the United States. Additional information is available at www.nicusa.com. CONTACT: NIC Chris Neff, 435-645-8898 cneff@nicusa.com -----END PRIVACY-ENHANCED MESSAGE-----