HackingProfessional ServicesProfessional ServicesPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

AG|CM, Inc.

bd_01c936a39b3f2c3a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 15, 2021

Filed

Jun 30, 2021

To disclose

11 weeks

Affected

1state residents only

Confidence

66%

Full breach record for AG|CM, Inc. →

AG|CM, Inc. notified the NH AG of a security incident discovered on April 15, 2021, involving unauthorized access to employee email accounts between Jan 26 and Apr 15, 2021. The incident resulted in the exposure of one NH resident's name and SSN. AG|CM engaged third-party specialists, reset passwords, and offered 12 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 79 days

discovery → filing · 11 weeks / 76 days

Jan 26, 2021

Begins

Apr 15, 2021

Discovered

Jun 30, 2021

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Cipriani & Werner
norm: cipriani werner
Domain: c-wlaw.com

Name: AG|CM, Inc.
norm: ag cm
Industry: Professional Servicesllm

Discovered: Apr 15, 2021
Breach occurred: Jan 26, 2021 – Apr 15, 2021
Undetected for: 79 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 28, 2021
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Working with third-party specialists to determine the nature and scope of the activity
Working with a third-party data review vendor to conduct a review of the contents of the accounts
Changed email account passwords
Reviewing its policies and procedures related to data security
Providing notice to potentially impacted individuals via letter
Offering complimentary credit monitoring and identity theft protection services through Kroll for 12 months
Changes made: Reviewing policies and procedures related to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(76 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ag-cm-20210630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2021
Raw hash: 571d898fb8410360b6b630d6abb9efae8acfa15c0e5ad2ad74ce2c704b6be511

Reporting entityCipriani & Werner

Victim entityAG|CM, Inc.

Incidentdiscovered Apr 15, 2021

Stated responseWorking with third-party specialists to determine the nature and scope of the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov