Social EngineeringOtherPhishingTargetedData ExfiltratedIdentity (basic)Government IDFinancialMediumContained

SEVEN HILLS FOUNDATION, INC.

bd_0066ec136f17a643 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 12, 2016

Filed

Apr 15, 2016

To disclose

3 days

Affected

26state residents only

Linked

2 filings

Confidence

66%

Full breach record for SEVEN HILLS FOUNDATION, INC. →

Seven Hills Foundation, Inc. notified the NH AG of a Business Email Compromise (BEC) incident. On April 8, 2016, an attacker spoofed the CEO's email to request employee W-2 forms. Seven Hills discovered the attack on April 12, 2016. Compromised data included names, addresses, SSNs, and wage info for 26 NH residents. The organization reported the incident to the FBI, IRS, and local law enforcement, and provided 2 years of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 3 days

Apr 8, 2016

Begins

Apr 12, 2016

Discovered

Apr 15, 2016

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_a211d5d9bd4a8a092016-04-15Verified

Name: Lewis Brisbois Bisgaard & Smith LLP
norm: lewis brisbois bisgaard smith

Name: SEVEN HILLS FOUNDATION, INC.
norm: seven hills
Domain: sevenhills.org
Industry: Otherllm

Discovered: Apr 12, 2016
Breach occurred: Apr 8, 2016
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 15, 2016
Affected individuals: 26state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralReported this incident to the IRSReported this incident to the FBIReported this incident to local law enforcementProviding written notice of this incident to other state regulators as necessary
Initial access: phishing_link

During the incident: Reported this incident to the IRS, FBI, and local law enforcement
Providing all impacted individuals access to 2 years of free credit and identity restoration services through Experian
Provided access to a confidential inquiry call center for impacted individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Reviewing current practices around email
Advising staff to not send personal information without verifying the request verbally
Changes made: Working to implement additional safeguards
Providing additional training to our employees on safeguarding the privacy and security of information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 3 days(3 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGApr 15 · first

New Hampshire State AGApr 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/seven-hills-foundation-20160415.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2016
Raw hash: ef287585ded599e0b2d6f90a59e870b948ca6d57ffe94a3315149731c0e245cc

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLewis Brisbois Bisgaard & Smith LLP

Victim entitySEVEN HILLS FOUNDATION, INC.

Incidentdiscovered Apr 12, 2016

Stated responseReported this incident to the IRS, FBI, and local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov