HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Hudson Structured Capital Management Ltd.

bd_07a07bdf16742e78 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 10, 2018

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

67%

Full breach record for Hudson Structured Capital Management Ltd. →

Hudson Structured Capital Management Ltd. notified the NH Attorney General of a breach where an unauthorized person accessed an employee email account for approximately one week, forwarding emails externally. Data potentially exposed includes names, addresses, and SSNs of employees and investors. One NH resident affected. Remediation included firewall strengthening, email encryption, and 12 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jan 10, 2018

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_d2a1015140e1147b2018-01-10Verified

Name: WILLKIE FARR & GALLAGHER LLP
norm: willkie farr gallagher

Name: Hudson Structured Capital Management Ltd.
norm: hudson structured capital management
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jan 10, 2018
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: valid_credentials

During the incident: Conducting a thorough review of its firewalls and strengthening them as applicable
Conducting thorough reviews of access logs
Performing threat scans of computers and systems
Implementing e-mail encryption capabilities on e-mail communications
Implementing e-mail security rules to identify suspicious and malicious e-mails
Engaging Experian to offer all employees and investors free credit monitoring services for the next twelve (12) months
Changes made: Implemented a new cyber-security and risk management solution platform to supplement and replace existing safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJan 10 · first

New Hampshire State AGJan 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/hudson-structured-20170110.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 10, 2018
Raw hash: 7a142020a7dac053a74ee84091ebb3b4eecff651c2e4b59afc2ae93a7bbc0962

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWILLKIE FARR & GALLAGHER LLP

Victim entityHudson Structured Capital Management Ltd.

IncidentPhishing

Stated responseConducting a thorough review of its firewalls and strengthening them as applicable

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov